NETGEAR Readynas Surveillance vulnerabilities

8 CVEs affecting NETGEAR Readynas Surveillance, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2017-18861, published 2020-04-28.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

CVE-2016-5674, published 2016-08-31. Critical severity, CVSS 9.8. EPSS: 94.6% chance of exploitation in the next 30 days. __debugging_center_utils___.php in NUUO NVRmini 2 1.7.5 through 3.0.0, NUUO NVRsolo 1.7.5 through 3.0.0, and NETGEAR ReadyNAS Surveillance 1.1.1 through 1.4.1 allows remote attackers to execute…
CVE-2016-5675, published 2016-08-31. Critical severity, CVSS 9.8. EPSS: 70.9% chance of exploitation in the next 30 days. handle_daylightsaving.php in NUUO NVRmini 2 1.7.5 through 3.0.0, NUUO NVRsolo 1.0.0 through 3.0.0, NUUO Crystal 2.2.1 through 3.2.0, and NETGEAR ReadyNAS Surveillance 1.1.1 through 1.4.1 allows…
CVE-2016-5676, published 2016-08-31. High severity, CVSS 7.5. EPSS: 53.7% chance of exploitation in the next 30 days. cgi-bin/cgi_system in NUUO NVRmini 2 1.7.5 through 2.x, NUUO NVRsolo 1.7.5 through 2.x, and NETGEAR ReadyNAS Surveillance 1.1.1 through 1.4.1 allows remote attackers to reset the administrator…
CVE-2016-5680, published 2016-08-31. High severity, CVSS 8.8. EPSS: 16.8% chance of exploitation in the next 30 days. Stack-based buffer overflow in cgi-bin/cgi_main in NUUO NVRmini 2 1.7.6 through 3.0.0 and NETGEAR ReadyNAS Surveillance 1.1.2 allows remote authenticated users to execute arbitrary code via the sn…
CVE-2016-5679, published 2016-08-31. High severity, CVSS 8.8. EPSS: 14.1% chance of exploitation in the next 30 days. cgi-bin/cgi_main in NUUO NVRmini 2 1.7.6 through 3.0.0 and NETGEAR ReadyNAS Surveillance 1.1.2 allows remote authenticated users to execute arbitrary commands via shell metacharacters in the sn…
CVE-2016-5677, published 2016-08-31. High severity, CVSS 7.5. EPSS: 12% chance of exploitation in the next 30 days. NUUO NVRmini 2 1.7.5 through 3.0.0, NUUO NVRsolo 1.0.0 through 3.0.0, and NETGEAR ReadyNAS Surveillance 1.1.1 through 1.4.1 have a hardcoded qwe23622260 password for the nuuoeng account, which allows…
CVE-2016-11056, published 2020-04-28. High severity, CVSS 8.8. EPSS: 1.6% chance of exploitation in the next 30 days. Certain NETGEAR devices are affected by anonymous root access. This affects ReadyNAS Surveillance 1.1.1-3-armel and earlier and ReadyNAS Surveillance 1.4.1-3-amd64 and earlier.
CVE-2017-18861, published 2020-04-28. High severity, CVSS 8.0. EPSS: 0.4% chance of exploitation in the next 30 days. Certain NETGEAR devices are affected by CSRF. This affects ReadyNAS Surveillance 1.4.3-15-x86 and earlier and ReadyNAS Surveillance 1.1.4-5-ARM and earlier.