CVE-2014-3206 Seagate BlackArmor NAS allows remote attackers to execute arbitrary code via the session parameter to localhost/backupmgt/localJob.php or the auth_name parameter to localhost/backupmgmt/pre_connect_ch...
CriticalCVSS 9.8
EPSS 51.0%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Seagate BlackArmor NAS allows remote attackers to execute arbitrary code via the session parameter to localhost/backupmgt/localJob.php or the auth_name parameter to localhost/backupmgmt/pre_connect_check.php.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| seagate blackarmor nas 220 firmware | All versions | No fix listed |
| seagate blackarmor nas 110 firmware | All versions | No fix listed |
References
- 33159 exploit third-party-advisory vdb-entry