1. This site uses cookies. By continuing to use this site, you are agreeing to our use of cookies. Learn More.

Bug in surveillance app opens Netgear NAS systems to compromise

Discussion in 'Help Net Security' started by RSS, Mar 14, 2016.

  1. RSS

    RSS New Member Member

    A security vulnerability in the ReadyNAS Surveillance Application can be exploited by unauthenticated, remote attackers to gain root access to Netgear NAS systems, Sysdream Labs researcher Nicolas Chatelain has found. ReadyNAS Surveillance is network video recording (NVR) software that installs directly to a ReadyNAS storage device and allows companies to set up a surveillance network with different types of IP cameras. “Because the ReadyNAS Surveillance cgi_system cgi application doesn’t check the user-provided ‘bfile’ POST parameter … More →

    Continue reading...

Share This Page