CVE-2016-5676: NUUO NVR and NETGEAR ReadyNAS Surveillance admin password reset via improper authorization

Automated analysis

Generated by VULONE's analysis model from the NVD record, CISA KEV and EPSS data on 20 September 2026. Confidence: high.

high priorityUnauthenticated remote admin takeover with public exploit code and very high EPSS, though not observed in KEV or ransomware campaigns.

What it is

The cgi-bin/cgi_system endpoint in NUUO NVRmini 2, NVRsolo and NETGEAR ReadyNAS Surveillance accepts a cmd=loaddefconfig action that resets the administrator password without proper authorization checks. Because the request needs no credentials, anyone who can reach the web interface can take over the device.

Impact

An unauthenticated attacker gains administrative control of the NVR or ReadyNAS Surveillance appliance by resetting the admin password, then can view or alter camera feeds, recordings and device configuration.

Attack surface

Reachable over the network through the device web interface's cgi-bin/cgi_system endpoint; the CVSS vector shows no privileges and no user interaction required.

Exploitation

Not listed in CISA KEV, but EPSS is 0.537 (99th percentile) and a public Exploit-DB entry (40200) exists, indicating exploit code is available and exploitation is plausible.

What to do

• Apply the vendor firmware updates for NUUO NVRmini 2/NVRsolo and NETGEAR ReadyNAS Surveillance that address the cgi_system authorization flaw.
• If no patch is available, isolate affected NVR and ReadyNAS Surveillance devices from untrusted networks and the internet.
• Restrict access to the web management interface with firewall rules or an authenticated reverse proxy.
• Change default and administrator credentials after any suspected exposure and audit for unauthorized admin changes.
• Monitor vendor and CERT/CC advisories for updated guidance on these end-of-life products.

Detection

• Search web/proxy logs for requests to cgi-bin/cgi_system containing cmd=loaddefconfig.
• Alert on administrator password changes or configuration resets outside approved maintenance windows.
• Monitor for unexpected admin logins or configuration changes on NVR and ReadyNAS Surveillance devices.
• Baseline normal management traffic to these appliances and flag access from unfamiliar source IPs.

This assessment is produced automatically and is not human-reviewed. Verify against the vendor advisory before acting on it.