CVE-2017-18263 Seagate Media Server in Seagate Personal Cloud before 4.3.18.4 has directory traversal in getPhotoPlaylistPhotos.psp via a parameter named url.
HighCVSS 7.5
EPSS 3.4%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Seagate Media Server in Seagate Personal Cloud before 4.3.18.4 has directory traversal in getPhotoPlaylistPhotos.psp via a parameter named url.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| seagate personal cloud firmware | < 4.3.18.4 | 4.3.18.4 |
References
- packetstormsecurity.com third-party-advisory vdb-entry
- sumofpwn.nl exploit third-party-advisory