CVE-2016-5674: Input Validation
debuggingcenterutils.php in NUUO NVRmini 2 1.7.5 through 3.0.0, NUUO NVRsolo 1.7.5 through 3.0.0, and NETGEAR ReadyNAS Surveillance 1.1.1 through 1.4.1 allows remote attackers to execute arbitrary PHP code via the log parameter.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2016-5674?
CVE-2016-5674 has a severity rating that indicates a critical risk due to its potential for arbitrary PHP code execution.
How do I fix CVE-2016-5674?
To fix CVE-2016-5674, you should upgrade to the latest versions of NETGEAR ReadyNAS Surveillance and NUUO NVR products that are not affected by this vulnerability.
Which versions are affected by CVE-2016-5674?
CVE-2016-5674 affects NUUO NVRmini 2 versions 1.7.5 through 3.0.0, NUUO NVRsolo versions 1.7.5 through 3.0.0, and NETGEAR ReadyNAS Surveillance versions 1.1.1 through 1.4.1.
What kind of attacks can be executed using CVE-2016-5674?
CVE-2016-5674 allows remote attackers to execute arbitrary PHP code, potentially compromising the affected systems.
Are there any known exploits for CVE-2016-5674?
Yes, there are known exploits associated with CVE-2016-5674 that can take advantage of the vulnerability to execute unauthorized actions.