CVE-2016-5680

Name of the Vulnerable Software and Affected Versions NUUO NVRmini 2 versions 1.7.6 through 3.0.0 NETGEAR ReadyNAS Surveillance version 1.1.2

Description The issue is a stack-based buffer overflow in the cgi-bin/cgi main component. It allows remote authenticated users to execute arbitrary code via the sn parameter to the "transfer license" command.

Recommendations For NUUO NVRmini 2 versions 1.7.6 through 3.0.0, update to a version that fixes this issue. For NETGEAR ReadyNAS Surveillance version 1.1.2, update to a version that fixes this issue. As a temporary workaround, consider restricting access to the transfer license command until a patch is available.