CVE-2016-5676

The exploit demonstrates multiple vulnerabilities in NUUO NVR devices and NETGEAR ReadyNAS Surveillance, including unauthenticated remote code execution via improper input validation in PHP files. Proofs of concept include command injection via GET parameters to achieve reverse shells as root or admin.

This Metasploit module exploits a vulnerability in NUUO NVRmini 2 and NETGEAR ReadyNAS Surveillance devices to reset the administrator password by loading default configurations. It supports both authenticated and unauthenticated attacks depending on the firmware version.