CVE-2016-5675
Summary
| CVE | CVE-2016-5675 |
|---|---|
| State | PUBLIC |
| Assigner | [email protected] |
| Source Priority | CVE Program / NVD first with legacy fallback |
| Published | 2016-08-31 15:59:00 UTC |
| Updated | 2017-09-03 01:29:00 UTC |
| Description | handle_daylightsaving.php in NUUO NVRmini 2 1.7.5 through 3.0.0, NUUO NVRsolo 1.0.0 through 3.0.0, NUUO Crystal 2.2.1 through 3.2.0, and NETGEAR ReadyNAS Surveillance 1.1.1 through 1.4.1 allows remote attackers to execute arbitrary PHP code via the NTPServer parameter. |
Risk And Classification
Problem Types: CWE-20
NVD Known Affected Configurations (CPE 2.3)
| Type | Vendor | Product | Version | Update | Edition | Language |
|---|---|---|---|---|---|---|
| Application | Netgear | Readynas Surveillance | 1.1.1 | All | All | All |
| Application | Netgear | Readynas Surveillance | 1.1.2 | All | All | All |
| Application | Netgear | Readynas Surveillance | 1.2.0.4 | All | All | All |
| Application | Netgear | Readynas Surveillance | 1.3.2.14 | All | All | All |
| Application | Netgear | Readynas Surveillance | 1.3.2.4 | All | All | All |
| Application | Netgear | Readynas Surveillance | 1.4.0 | All | All | All |
| Application | Netgear | Readynas Surveillance | 1.4.1 | All | All | All |
| Application | Netgear | Readynas Surveillance | 1.4.2 | All | All | All |
| Application | Netgear | Readynas Surveillance | 1.1.1 | All | All | All |
| Application | Netgear | Readynas Surveillance | 1.1.2 | All | All | All |
| Application | Netgear | Readynas Surveillance | 1.2.0.4 | All | All | All |
| Application | Netgear | Readynas Surveillance | 1.3.2.14 | All | All | All |
| Application | Netgear | Readynas Surveillance | 1.3.2.4 | All | All | All |
| Application | Netgear | Readynas Surveillance | 1.4.0 | All | All | All |
| Application | Netgear | Readynas Surveillance | 1.4.1 | All | All | All |
| Application | Netgear | Readynas Surveillance | 1.4.2 | All | All | All |
| Application | Nuuo | Crystal | 2.2.1 | All | All | All |
| Application | Nuuo | Crystal | 3.0.0 | All | All | All |
| Application | Nuuo | Crystal | 3.1.0 | All | All | All |
| Application | Nuuo | Crystal | 3.2.0 | All | All | All |
| Application | Nuuo | Crystal | 2.2.1 | All | All | All |
| Application | Nuuo | Crystal | 3.0.0 | All | All | All |
| Application | Nuuo | Crystal | 3.1.0 | All | All | All |
| Application | Nuuo | Crystal | 3.2.0 | All | All | All |
| Operating System | Nuuo | Nvrmini 2 | 1.7.5 | All | All | All |
| Operating System | Nuuo | Nvrmini 2 | 1.7.6 | All | All | All |
| Operating System | Nuuo | Nvrmini 2 | 2.0.0 | All | All | All |
| Operating System | Nuuo | Nvrmini 2 | 2.2.1 | All | All | All |
| Operating System | Nuuo | Nvrmini 2 | 3.0.0 | All | All | All |
| Operating System | Nuuo | Nvrmini 2 | 1.7.5 | All | All | All |
| Operating System | Nuuo | Nvrmini 2 | 1.7.6 | All | All | All |
| Operating System | Nuuo | Nvrmini 2 | 2.0.0 | All | All | All |
| Operating System | Nuuo | Nvrmini 2 | 2.2.1 | All | All | All |
| Operating System | Nuuo | Nvrmini 2 | 3.0.0 | All | All | All |
| Operating System | Nuuo | Nvrsolo | 1.0.0 | All | All | All |
| Operating System | Nuuo | Nvrsolo | 1.0.1 | All | All | All |
| Operating System | Nuuo | Nvrsolo | 1.1.0 | All | All | All |
| Operating System | Nuuo | Nvrsolo | 1.1.0.117 | All | All | All |
| Operating System | Nuuo | Nvrsolo | 1.1.1 | All | All | All |
| Operating System | Nuuo | Nvrsolo | 1.1.2 | All | All | All |
| Operating System | Nuuo | Nvrsolo | 1.2.0 | All | All | All |
| Operating System | Nuuo | Nvrsolo | 1.3.0 | All | All | All |
| Operating System | Nuuo | Nvrsolo | 1.75 | All | All | All |
| Operating System | Nuuo | Nvrsolo | 2.0.0 | All | All | All |
| Operating System | Nuuo | Nvrsolo | 2.0.1 | All | All | All |
| Operating System | Nuuo | Nvrsolo | 2.1.5 | All | All | All |
| Operating System | Nuuo | Nvrsolo | 2.2.2 | All | All | All |
| Operating System | Nuuo | Nvrsolo | 2.3 | All | All | All |
| Operating System | Nuuo | Nvrsolo | 2.3.1.20 | All | All | All |
| Operating System | Nuuo | Nvrsolo | 2.3.7.10 | All | All | All |
| Operating System | Nuuo | Nvrsolo | 2.3.7.9 | All | All | All |
| Operating System | Nuuo | Nvrsolo | 2.3.9.6 | All | All | All |
| Operating System | Nuuo | Nvrsolo | 3.0.0 | All | All | All |
| Operating System | Nuuo | Nvrsolo | 1.0.0 | All | All | All |
| Operating System | Nuuo | Nvrsolo | 1.0.1 | All | All | All |
| Operating System | Nuuo | Nvrsolo | 1.1.0 | All | All | All |
| Operating System | Nuuo | Nvrsolo | 1.1.0.117 | All | All | All |
| Operating System | Nuuo | Nvrsolo | 1.1.1 | All | All | All |
| Operating System | Nuuo | Nvrsolo | 1.1.2 | All | All | All |
| Operating System | Nuuo | Nvrsolo | 1.2.0 | All | All | All |
| Operating System | Nuuo | Nvrsolo | 1.3.0 | All | All | All |
| Operating System | Nuuo | Nvrsolo | 1.75 | All | All | All |
| Operating System | Nuuo | Nvrsolo | 2.0.0 | All | All | All |
| Operating System | Nuuo | Nvrsolo | 2.0.1 | All | All | All |
| Operating System | Nuuo | Nvrsolo | 2.1.5 | All | All | All |
| Operating System | Nuuo | Nvrsolo | 2.2.2 | All | All | All |
| Operating System | Nuuo | Nvrsolo | 2.3 | All | All | All |
| Operating System | Nuuo | Nvrsolo | 2.3.1.20 | All | All | All |
| Operating System | Nuuo | Nvrsolo | 2.3.7.10 | All | All | All |
| Operating System | Nuuo | Nvrsolo | 2.3.7.9 | All | All | All |
| Operating System | Nuuo | Nvrsolo | 2.3.9.6 | All | All | All |
| Operating System | Nuuo | Nvrsolo | 3.0.0 | All | All | All |
References
| Reference | Source | Link | Tags |
|---|---|---|---|
| NUUO and Netgear Network Multiple Products Multiple Security Vulnerabilities | BID | www.securityfocus.com | |
| Vulnerability Note VU#856152 - NUUO and Netgear Network Video Recorder (NVR) products web interfaces contain multiple vulnerabilities | CERT-VN | www.kb.cert.org | Third Party Advisory, US Government Resource |
| NUUO NVRmini2 / NVRsolo / Crystal Devices and NETGEAR ReadyNAS Surveillance Application - Multiple Vulnerabilities | EXPLOIT-DB | www.exploit-db.com | |
| CVE Program record | CVE.ORG | www.cve.org | canonical |
| NVD vulnerability detail | NVD | nvd.nist.gov | canonical, analysis |
No vendor comments have been submitted for this CVE.
There are currently no legacy QID mappings associated with this CVE.