NUUO and Netgear Network Video Recorder (NVR) products web interfaces contain multiple vulnerabiliti

ronjor · Aug 4, 2016

Original Release date: 04 Aug 2016 | Last revised: 04 Aug 2016

Overview

NUUO NVRmini 2, NVRsolo, Crystal, and Netgear ReadyNAS Surveillance products have web management interfaces containing multiple vulnerabilities that can be leveraged to gain complete control of affected devices.
Click to expand...

http://www.kb.cert.org/vuls/id/856152

Minimalist · Sep 17, 2018

Zero day in popular video surveillance technology goes public, unpatched

Sharp-eyed researchers have spotted a critical vulnerability in numerous surveillance devices from the video management company NUUO.

We’ve seen this before: In 2016, multiple critical vulnerabilities in NUUO devices were publicized in an excruciatingly public way. The latest — a buffer overflow issue — was spotted by researchers at the U.S. cybersecurity firm Tenable, which has named the bug Peekaboo.

The bug allows remote code execution on video surveillance systems. That means a hacker could watch or tamper with surveillance feeds.
Click to expand...

https://www.cyberscoop.com/nuuo-zero-day-peekaboo-video-surveillance-vulnerability/

guest · Nov 29, 2018

Hackers can exploit this bug in surveillance cameras to tamper with footage
November 29, 2018
https://www.zdnet.com/article/hacke...-surveillance-cameras-to-tamper-with-footage/

Researchers have discovered a vulnerability in Nuuo surveillance cameras which can be exploited to hijack these devices and tamper with footage and live feeds.

On Thursday, cybersecurity firm Digital Defense said that its Vulnerability Research Team (VRT) had uncovered a zero-day vulnerability in Nuuo NVRmini 2 Network Video Recorder firmware, software used by hundreds of thousands of surveillance cameras worldwide.

The vulnerability is an unauthenticated remote buffer overflow security flaw which can be exploited by attackers execute arbitrary code on the system with root privileges.
The source of the problem lies in a failure to properly sanitize user-supplied inputs, combined with a lack of URI length checks.
Click to expand...

Log in or Sign up

NUUO and Netgear Network Video Recorder (NVR) products web interfaces contain multiple vulnerabiliti

ronjor Global Moderator

Minimalist Registered Member

guest Guest

Log in or Sign up

NUUO and Netgear Network Video Recorder (NVR) products web interfaces contain multiple vulnerabiliti

ronjor Global Moderator

Minimalist Registered Member

guest Guest

Useful Searches