PT-2016-6636
CVE-2016-5680
·
تاريخ النشر
2016-08-31
·
تاريخ التحديث
2017-09-03
الوصف من
CVSS 2.0
9.0
عاليةالمقاييسAV:N/AC:L/Au:S/C:C/I:C/A:C
Name of the Vulnerable Software and Affected Versions
NUUO NVRmini 2 versions 1.7.6 through 3.0.0
NETGEAR ReadyNAS Surveillance version 1.1.2
Description
The issue is a stack-based buffer overflow in the cgi-bin/cgi main component. It allows remote authenticated users to execute arbitrary code via the
sn parameter to the "transfer license" command.Recommendations
For NUUO NVRmini 2 versions 1.7.6 through 3.0.0, update to a version that fixes this issue.
For NETGEAR ReadyNAS Surveillance version 1.1.2, update to a version that fixes this issue.
As a temporary workaround, consider restricting access to the
transfer license command until a patch is available.قابلية الاستغلال
استغلال
إصلاح
التأثيرات
الباحثون
المورّدون
المنتجات المتأثرة
وجدت خطأً في الوصف؟ لديك ما تضيفه؟ لا تتردد في مراسلتنا 👾