GCVE - cpe:2.3:o:nuuo:nvrmini_2:2.2.1:*:*:*:*:*:*:*

Approved changes feed: RSS · Atom

cpe:2.3:o:nuuo:nvrmini_2:2.2.1:*:*:*:*:*:*:*

part: o version: 2.2.1 update: *

Vendor	Nuuo (`9d792d33-2f8a-5712-a46c-4352a0a63a8f`)
Product	Nvrmini 2 (`9f45d3e0-468c-50f3-987d-f5acc08ea8f4`)
Edition	*
Language	*
Software edition	*
Target software	*
Target hardware	*
Other	*
Notes	Imported from NVD CPE 2.0 feed

PURL mappings

PURL	Source	Last updated
No PURL mappings for this CPE yet.

Vulnerability references

Identifier	cpeApplicability	Submitted	db.gcve.eu details	Rationale
`CVE:CVE-2016-5680`	vulnerable	2026-06-08 05:07:57.460423	Details available Stack-based buffer overflow in cgi-bin/cgi_main in NUUO NVRmini 2 1.7.6 through 3.0.0 and NETGEAR ReadyNAS Surveillance 1.1.2 allows remote authenticated users to execute arbitrary code via the sn parameter to the transfer_license command. Published: 2016-08-31T15:00:00.000Z Updated: 2024-08-06T01:07:59.910Z Open on db.gcve.eu Reference links http://www.kb.cert.org/vuls/id/856152 http://www.securityfocus.com/bid/92318 https://www.exploit-db.com/exploits/40200/	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2016-5679`	vulnerable	2026-06-08 05:07:57.459990	Details available cgi-bin/cgi_main in NUUO NVRmini 2 1.7.6 through 3.0.0 and NETGEAR ReadyNAS Surveillance 1.1.2 allows remote authenticated users to execute arbitrary commands via shell metacharacters in the sn parameter to the transfer_license command. Published: 2016-08-31T15:00:00.000Z Updated: 2024-08-06T01:08:00.620Z Open on db.gcve.eu Reference links http://www.kb.cert.org/vuls/id/856152 http://www.securityfocus.com/bid/92318 https://www.exploit-db.com/exploits/40200/	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2016-5678`	vulnerable	2026-06-08 05:07:57.459179	Details available NUUO NVRmini 2 1.0.0 through 3.0.0 and NUUO NVRsolo 1.0.0 through 3.0.0 have hardcoded root credentials, which allows remote attackers to obtain administrative access via unspecified vectors. Published: 2016-08-31T15:00:00.000Z Updated: 2024-08-06T01:08:00.435Z Open on db.gcve.eu Reference links http://www.kb.cert.org/vuls/id/856152 http://www.securityfocus.com/bid/92318 https://www.exploit-db.com/exploits/40200/	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2016-5677`	vulnerable	2026-06-08 05:07:57.444242	Details available NUUO NVRmini 2 1.7.5 through 3.0.0, NUUO NVRsolo 1.0.0 through 3.0.0, and NETGEAR ReadyNAS Surveillance 1.1.1 through 1.4.1 have a hardcoded qwe23622260 password for the nuuoeng account, which allows remote attackers to obtain sensitive information via an __nvr_status___.php request. Published: 2016-08-31T15:00:00.000Z Updated: 2024-08-06T01:07:59.947Z Open on db.gcve.eu Reference links http://www.kb.cert.org/vuls/id/856152 http://www.securityfocus.com/bid/92318 https://www.exploit-db.com/exploits/40200/	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2016-5676`	vulnerable	2026-06-08 05:07:57.443411	Details available cgi-bin/cgi_system in NUUO NVRmini 2 1.7.5 through 2.x, NUUO NVRsolo 1.7.5 through 2.x, and NETGEAR ReadyNAS Surveillance 1.1.1 through 1.4.1 allows remote attackers to reset the administrator password via a cmd=loaddefconfig action. Published: 2016-08-31T15:00:00.000Z Updated: 2024-08-06T01:07:59.977Z Open on db.gcve.eu Reference links http://www.kb.cert.org/vuls/id/856152 http://www.securityfocus.com/bid/92318 https://www.exploit-db.com/exploits/40200/	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2016-5675`	vulnerable	2026-06-08 05:07:57.442481	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2016-5674`	vulnerable	2026-06-08 05:07:57.424057	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.