Loading
NUUO NVRmini 2 1.7.5 through 3.0.0, NUUO NVRsolo 1.0.0 through 3.0.0, and NETGEAR ReadyNAS Surveillance 1.1.1 through 1.4.1 have a hardcoded qwe23622260 password for the nuuoeng account, which allows remote attackers to obtain sensitive information via an __nvr_status___.php request.
Use CWE-200, Netgear vendor hub and Readynas Surveillance product page to widen CVE-2016-5677 into its surrounding weakness, vendor, and product context.
Compare it with CVE-2016-5675, CVE-2016-5674 and CVE-2016-11056 for nearby disclosures in the same product family.