Critical severity9.8NVD Advisory· Published Aug 31, 2016· Updated May 6, 2026

CVE-2016-5675

Description

handle_daylightsaving.php in NUUO NVRmini 2 1.7.5 through 3.0.0, NUUO NVRsolo 1.0.0 through 3.0.0, NUUO Crystal 2.2.1 through 3.2.0, and NETGEAR ReadyNAS Surveillance 1.1.1 through 1.4.1 allows remote attackers to execute arbitrary PHP code via the NTPServer parameter.

Patches

No patches discovered yet.

Vulnerability mechanics

AI mechanics synthesis has not run for this CVE yet.

References

www.kb.cert.org/vuls/id/856152nvdThird Party AdvisoryUS Government Resource
www.securityfocus.com/bid/92318nvd
www.exploit-db.com/exploits/40200/nvd

News mentions

No linked articles in our index yet.

cvss	0.637
epss	0.058
exploit	0.030
kev	0.000
patch	0.000
ransomware	0.000