Vulnerabilities

TI-2016-09091 CVE-2016-11056 · GHSA-gcgh-jch3-mpcp

Certain NETGEAR devices are affected by anonymous root access.

MEDIUM 41

Certain NETGEAR devices are affected by anonymous root access.

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.01564 Published 2020-04-28 No fix listed

TI-2017-14009 CVE-2017-18861 · GHSA-92qv-vvr2-8w3j

Certain NETGEAR devices are affected by CSRF.

LOW 35

Certain NETGEAR devices are affected by CSRF.

CVSS 3.1HIGH 8.0 Adjacent network No auth User interaction EPSS 0.00377 Published 2020-04-28 No fix listed CWE-352

TI-2016-04935 CVE-2016-5680 · GHSA-qjpx-gqc9-mcgx

Stack-based buffer overflow in cgi-bin/cgi_main in NUUO NVRmini 2 1.7.6 through 3.0.0 and…

MEDIUM 55

Stack-based buffer overflow in cgi-bin/cgi_main in NUUO NVRmini 2 1.7.6 through 3.0.0 and NETGEAR ReadyNAS Surveillance 1.1.2 allows remote authenticated users to execute arbitrary code via the sn parameter to the transf…

CVSS 3.0HIGH 8.8 Network Low privileges No interaction EPSS 0.16752 Published 2016-08-31 No fix listed CWE-119

TI-2016-04934 CVE-2016-5679 · GHSA-qv3w-r93f-fcxc

cgi-bin/cgi_main in NUUO NVRmini 2 1.7.6 through 3.0.0 and NETGEAR ReadyNAS Surveillance…

MEDIUM 53

cgi-bin/cgi_main in NUUO NVRmini 2 1.7.6 through 3.0.0 and NETGEAR ReadyNAS Surveillance 1.1.2 allows remote authenticated users to execute arbitrary commands via shell metacharacters in the sn parameter to the transfer_…

CVSS 3.0HIGH 8.8 Network Low privileges No interaction EPSS 0.14119 Published 2016-08-31 No fix listed CWE-78

TI-2016-04932 CVE-2016-5677 · GHSA-43hr-5fqr-46mx

NUUO NVRmini 2 1.7.5 through 3.0.0, NUUO NVRsolo 1.0.0 through 3.0.0, and NETGEAR…

MEDIUM 47

NUUO NVRmini 2 1.7.5 through 3.0.0, NUUO NVRsolo 1.0.0 through 3.0.0, and NETGEAR ReadyNAS Surveillance 1.1.1 through 1.4.1 have a hardcoded qwe23622260 password for the nuuoeng account, which allows remote attackers to…

CVSS 3.0HIGH 7.5 Network No auth No interaction EPSS 0.11989 Published 2016-08-31 No fix listed CWE-200

TI-2016-04931 CVE-2016-5676 · GHSA-mhfq-mh5j-8qxc

cgi-bin/cgi_system in NUUO NVRmini 2 1.7.5 through 2.x, NUUO NVRsolo 1.7.5 through 2.x…

HIGH 65

cgi-bin/cgi_system in NUUO NVRmini 2 1.7.5 through 2.x, NUUO NVRsolo 1.7.5 through 2.x, and NETGEAR ReadyNAS Surveillance 1.1.1 through 1.4.1 allows remote attackers to reset the administrator password via a cmd=loaddefc…

CVSS 3.0HIGH 7.5 Network No auth No interaction EPSS 0.53715 Published 2016-08-31 No fix listed CWE-285

TI-2016-04930 CVE-2016-5675 · GHSA-h33j-gch2-5c9c

handle_daylightsaving.php in NUUO NVRmini 2 1.7.5 through 3.0.0, NUUO NVRsolo 1.0.0…

HIGH 80

handle_daylightsaving.php in NUUO NVRmini 2 1.7.5 through 3.0.0, NUUO NVRsolo 1.0.0 through 3.0.0, NUUO Crystal 2.2.1 through 3.2.0, and NETGEAR ReadyNAS Surveillance 1.1.1 through 1.4.1 allows remote attackers to execut…

CVSS 3.0CRITICAL 9.8 Network No auth No interaction EPSS 0.70877 Published 2016-08-31 No fix listed CWE-20

TI-2016-04929 CVE-2016-5674 · GHSA-fx93-287m-8f7q

__debugging_center_utils___.php in NUUO NVRmini 2 1.7.5 through 3.0.0, NUUO NVRsolo 1.7.5…

CRITICAL 86

__debugging_center_utils___.php in NUUO NVRmini 2 1.7.5 through 3.0.0, NUUO NVRsolo 1.7.5 through 3.0.0, and NETGEAR ReadyNAS Surveillance 1.1.1 through 1.4.1 allows remote attackers to execute arbitrary PHP code via the…

CVSS 3.0CRITICAL 9.8 Network No auth No interaction EPSS 0.9461 Published 2016-08-31 No fix listed CWE-20

Vulnerabilities

Filters