CVE-2016-5674
82Vexday Risk Score
Patch now. It exploitation observed by VulnCheck and has a working public exploit.
ssvc Actepss 95%
from disclosure to weapon0 days
Published on NVDAug 31
1st PoCAug 5
metasploitAug 4
VulnCheck+2039d
exploitation probability
95%top 1% of all CVEs
observed exploitation
yesVulnCheck
2 public exploit(s)
__debugging_center_utils___.php in NUUO NVRmini 2 1.7.5 through 3.0.0, NUUO NVRsolo 1.7.5 through 3.0.0, and NETGEAR ReadyNAS Surveillance 1.1.1 through 1.4.1 allows remote attackers to execute arbitrary PHP code via the log parameter.
Affected products
n/a · n/apublic PoCs found — 2
exploitdbwww.exploit-db.com/exploits/40200unverifiedcve_referencewww.exploit-db.com/exploits/40200/unverified⚠ Public resources, to assess the exposure of systems you control or are authorized to test. Test only with authorization.