CVE-2016-5678: NUUO NVRmini 2

Critical severity, CVSS 9.8. EPSS: 8.7% chance of exploitation in the next 30 days.

NUUO NVRmini 2 1.0.0 through 3.0.0 and NUUO NVRsolo 1.0.0 through 3.0.0 have hardcoded root credentials, which allows remote attackers to obtain administrative access via unspecified vectors.

Affected products

  • NUUO NVRmini 2: version 1.0.0 only; version 1.1.0 only; version 1.3.0 only; version 1.3.2 only; version 1.4.0 only; version 1.5.1 only; …
  • NUUO Nvrsolo: version 1.0.0 only; version 1.0.1 only; version 1.1.0 only; version 1.1.0.117 only; version 1.1.1 only; version 1.1.2 only; …

Published 2016-08-31. Last modified 2026-06-17.