Threat Encyclopedia

NUUO.Surveillance.Application.UNAUTH.Remote.Code.Execution

description-logoDescription

This indicates an attack attempt to exploit a remote Code Execution vulnerability in NUUO and Netgear Network Video Recorder (NVR) products.
The vulnerability is due to insufficient checks when handling HTTP request from client. A remote attacker may be able to exploit this to execute arbitrary code on vulnerable systems via a crafted HTTP request.

affected-products-logoAffected Products

NUUO NVRmini 2, versions 1.7.5 to 3.0.0
NUUO NVRsolo, versions 1.0.0 to 3.0.0
NUUO Crystal, versions 2.2.1 to 3.2.0
ReadyNAS Surveillance, both x86 and ARM, versions 1.1.1 to 1.4.1

Impact logoImpact

System Compromise: Remote attackers can gain control of vulnerable systems.

recomended-action-logoRecommended Actions

Currently we are unaware of any vendor supplied patch for this issue.

CVE References

CVE-2016-5674

Other References

US-CERT-VU 856152

Telemetry logoTelemetry