Vulnerability Details CVE-2016-5679
cgi-bin/cgi_main in NUUO NVRmini 2 1.7.6 through 3.0.0 and NETGEAR ReadyNAS Surveillance 1.1.2 allows remote authenticated users to execute arbitrary commands via shell metacharacters in the sn parameter to the transfer_license command.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.083
EPSS Ranking 91.8%
CVSS Severity
CVSS v3 Score 8.8
CVSS v2 Score 9.0
References
Products affected by CVE-2016-5679
-
cpe:2.3:a:netgear:readynas_surveillance:1.1.2
-
cpe:2.3:o:nuuo:nvrmini_2:1.7.6
-
cpe:2.3:o:nuuo:nvrmini_2:2.0.0
-
cpe:2.3:o:nuuo:nvrmini_2:2.2.1
-
cpe:2.3:o:nuuo:nvrmini_2:3.0.0