CVE-2016-5677: NETGEAR Readynas Surveillance

High severity, CVSS 7.5. EPSS: 12% chance of exploitation in the next 30 days.

NUUO NVRmini 2 1.7.5 through 3.0.0, NUUO NVRsolo 1.0.0 through 3.0.0, and NETGEAR ReadyNAS Surveillance 1.1.1 through 1.4.1 have a hardcoded qwe23622260 password for the nuuoeng account, which allows remote attackers to obtain sensitive information via an __nvr_status___.php request.

Affected products

• NETGEAR Readynas Surveillance: version 1.1.1 only; version 1.1.2 only; version 1.2.0.4 only; version 1.3.2.4 only; version 1.3.2.14 only; version 1.4.0 only; …
• NUUO NVRmini 2: version 1.7.5 only; version 1.7.6 only; version 2.0.0 only; version 2.2.1 only; version 3.0.0 only
• NUUO Nvrsolo: version 1.0.0 only; version 1.0.1 only; version 1.1.0 only; version 1.1.0.117 only; version 1.1.1 only; version 1.1.2 only; …

Published 2016-08-31. Last modified 2026-06-17.