CVE-2016-5677: Infoleak
NUUO NVRmini 2 1.7.5 through 3.0.0, NUUO NVRsolo 1.0.0 through 3.0.0, and NETGEAR ReadyNAS Surveillance 1.1.1 through 1.4.1 have a hardcoded qwe23622260 password for the nuuoeng account, which allows remote attackers to obtain sensitive information via an nvrstatus.php request.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2016-5677?
CVE-2016-5677 has a high severity rating due to the use of a hardcoded password that allows unauthorized remote access.
How do I fix CVE-2016-5677?
To fix CVE-2016-5677, update your NUUO NVRmini, NUUO NVRsolo, or NETGEAR ReadyNAS Surveillance to the latest firmware version that removes the hardcoded password.
Which versions are affected by CVE-2016-5677?
CVE-2016-5677 affects NUUO NVRmini 2 versions 1.7.5 to 3.0.0, NUUO NVRsolo versions 1.0.0 to 3.0.0, and NETGEAR ReadyNAS Surveillance versions 1.1.1 to 1.4.1.
What are the potential impacts of CVE-2016-5677?
CVE-2016-5677 allows remote attackers to obtain sensitive information and potentially compromise the system.
Is there a workaround for CVE-2016-5677?
There is no official workaround for CVE-2016-5677; the best mitigation is to upgrade the affected systems to secure versions.