NVD

Id
20891  
Name
CVE-2016-5675  
Description
handle_daylightsaving.php in NUUO NVRmini 2 1.7.5 through 3.0.0, NUUO NVRsolo 1.0.0 through 3.0.0, NUUO Crystal 2.2.1 through 3.2.0, and NETGEAR ReadyNAS Surveillance 1.1.1 through 1.4.1 allows remote attackers to execute arbitrary PHP code via the NTPServer parameter.  
Reject
 
CVSS Version
2  
CVSS Score
10  
Severity
High  
CVSS Base Score
10  
CVSS Impact Subscore
10  
CVSS Exploit Subscore
10  
CVSS Vector
(AV:N/AC:L/Au:N/C:C/I:C/A:C)  
Pub Date
2017-01-19  
Published
2016-08-31  
Modified Date
2016-11-28  
Seq
2016-5675  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
113813 20891 CVE-2016-5675 VU#856152  View
113814 20891 CVE-2016-5675 92318  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
3716 JVNDB-2016-004489 複数の NUUO 製品および NETGEAR ReadyNAS Surveillance の handle_daylightsaving.php における任意の PHP コードを実行される脆弱性 NUUO NVRmini 2、NVRsolo、Crystal および NETGEAR ReadyNAS Surveillance の handle_daylightsaving.php には、任意の PHP コードを実行される脆弱性が存在します。 CVE-2016-5675 92181 CVE-2016-5675 20891 10 9.8 http://jvndb.jvn.jp/ja/contents/2016/JVNDB-2016-004489.html 2016-08-04 2016-09-01 View