CVEs-PoC/2016/CVE-2016-5679.md

CVE-2016-5679

Description

cgi-bin/cgi_main in NUUO NVRmini 2 1.7.6 through 3.0.0 and NETGEAR ReadyNAS Surveillance 1.1.2 allows remote authenticated users to execute arbitrary commands via shell metacharacters in the sn parameter to the transfer_license command.

POC

Reference

• http://www.kb.cert.org/vuls/id/856152
• http://www.kb.cert.org/vuls/id/856152
• https://www.exploit-db.com/exploits/40200/
• https://www.exploit-db.com/exploits/40200/

Github

• https://github.com/ARPSyndicate/cvemon