Vulnerability Details CVE-2014-3206
Seagate BlackArmor NAS allows remote attackers to execute arbitrary code via the session parameter to localhost/backupmgt/localJob.php or the auth_name parameter to localhost/backupmgmt/pre_connect_check.php.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.931
EPSS Ranking 99.8%
CVSS Severity
CVSS v3 Score 9.8
CVSS v2 Score 10.0
Products affected by CVE-2014-3206
-
cpe:2.3:h:seagate:blackarmor_nas_110:-
-
cpe:2.3:h:seagate:blackarmor_nas_220:-
-
cpe:2.3:o:seagate:blackarmor_nas_110_firmware:-
-
cpe:2.3:o:seagate:blackarmor_nas_220_firmware:-