{"action":"created","issue":{"url":"https://api.github.com/repos/rapid7/metasploit-framework/issues/7181","repository_url":"https://api.github.com/repos/rapid7/metasploit-framework","labels_url":"https://api.github.com/repos/rapid7/metasploit-framework/issues/7181/labels{/name}","comments_url":"https://api.github.com/repos/rapid7/metasploit-framework/issues/7181/comments","events_url":"https://api.github.com/repos/rapid7/metasploit-framework/issues/7181/events","html_url":"https://github.com/rapid7/metasploit-framework/pull/7181","id":169418257,"number":7181,"title":"Add exploit for CVE 2016-5675 / Nuuo and Netgear authenticated RCE","user":{"login":"pedrib","id":5311656,"avatar_url":"https://avatars.githubusercontent.com/u/5311656?v=3","gravatar_id":"","url":"https://api.github.com/users/pedrib","html_url":"https://github.com/pedrib","followers_url":"https://api.github.com/users/pedrib/followers","following_url":"https://api.github.com/users/pedrib/following{/other_user}","gists_url":"https://api.github.com/users/pedrib/gists{/gist_id}","starred_url":"https://api.github.com/users/pedrib/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/pedrib/subscriptions","organizations_url":"https://api.github.com/users/pedrib/orgs","repos_url":"https://api.github.com/users/pedrib/repos","events_url":"https://api.github.com/users/pedrib/events{/privacy}","received_events_url":"https://api.github.com/users/pedrib/received_events","type":"User","site_admin":false},"labels":[{"url":"https://api.github.com/repos/rapid7/metasploit-framework/labels/feature","name":"feature","color":"bfe5bf"},{"url":"https://api.github.com/repos/rapid7/metasploit-framework/labels/module","name":"module","color":"eb6420"}],"state":"open","locked":false,"assignee":null,"assignees":[],"milestone":null,"comments":2,"created_at":"2016-08-04T16:34:28Z","updated_at":"2016-08-08T21:02:57Z","closed_at":null,"pull_request":{"url":"https://api.github.com/repos/rapid7/metasploit-framework/pulls/7181","html_url":"https://github.com/rapid7/metasploit-framework/pull/7181","diff_url":"https://github.com/rapid7/metasploit-framework/pull/7181.diff","patch_url":"https://github.com/rapid7/metasploit-framework/pull/7181.patch"},"body":"Vulnerability: Improper Input Validation (leading to remote code execution)\r\nCVE-2016-5675\r\nAttack Vector: Remote\r\nConstraints: Requires an administrator account\r\nAffected products / versions:\r\n- NUUO NVRmini 2, firmware v1.7.5 to 3.0.0 (older firmware versions might be affected)\r\n- NUUO NVRsolo, firmware v1.0.0 to 3.0.0\r\n- NUUO Crystal, firmware v2.2.1 to v3.2.0 (older firmware versions might be affected)\r\n- ReadyNAS Surveillance, v1.1.1 to v1.4.1 (affects both x86 and ARM versions, older versions might be affected)\r\n- Other NUUO products that share the same web interface might be affected\r\n\r\nThe handle_daylightsaving.php page does not sanitise input from the NTPServer parameter correctly and passes it to a PHP system() command.\r\n\r\nPcap for NVRmini 2 v2.2.1: http://www.filedropper.com/nuuo-rce-auth-221\r\nPcap for Netgear v1.1.1: http://www.filedropper.com/readynas-rce-auth-111"},"comment":{"url":"https://api.github.com/repos/rapid7/metasploit-framework/issues/comments/238376434","html_url":"https://github.com/rapid7/metasploit-framework/pull/7181#issuecomment-238376434","issue_url":"https://api.github.com/repos/rapid7/metasploit-framework/issues/7181","id":238376434,"user":{"login":"wchen-r7","id":1170914,"avatar_url":"https://avatars.githubusercontent.com/u/1170914?v=3","gravatar_id":"","url":"https://api.github.com/users/wchen-r7","html_url":"https://github.com/wchen-r7","followers_url":"https://api.github.com/users/wchen-r7/followers","following_url":"https://api.github.com/users/wchen-r7/following{/other_user}","gists_url":"https://api.github.com/users/wchen-r7/gists{/gist_id}","starred_url":"https://api.github.com/users/wchen-r7/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/wchen-r7/subscriptions","organizations_url":"https://api.github.com/users/wchen-r7/orgs","repos_url":"https://api.github.com/users/wchen-r7/repos","events_url":"https://api.github.com/users/wchen-r7/events{/privacy}","received_events_url":"https://api.github.com/users/wchen-r7/received_events","type":"User","site_admin":false},"created_at":"2016-08-08T21:02:57Z","updated_at":"2016-08-08T21:02:57Z","body":"Spoke to @bcook-r7 about landing without having access to the vulnerable setup. We have concluded that the code looks fine, and there is at least a pcap, so we will land it."}}
{"actor":{"display_login":"wchen-r7"}}