CVE-2014-3206

Seagate BlackArmor NAS allows remote attackers to execute arbitrary code via the session parameter to localhost/backupmgt/localJob.php or the auth_name parameter to localhost/backupmgmt/pre_connect_check.php.

Score

CVSS 3.0 9.8 Critical

Status

Modified - cve@mitre.org

Published

2018-02-23

Last modified

2024-08-06

Weaknesses

CWE-20

Affected products

• Blackarmor Nas 110 Firmware (Seagate)
• Blackarmor Nas 220 Firmware (Seagate)

References

• https://www.exploit-db.com/exploits/33159/