critical9.8Public exploit code
CVE-2013-6924
Seagate BlackArmor NAS devices with firmware sg2000-2000.1331 allow remote attackers to execute arbitrary commands via shell metacharacters in the ip parameter…
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- Seagate BlackArmor NAS sg2000-2000.1331 - Remote Command Execution2014-01-06 · webapps · hardware
- Seagate BlackArmor NAS - Privilege Escalation2014-01-06 · webapps · hardware
Impact
Seagate BlackArmor NAS devices with firmware sg2000-2000.1331 allow remote attackers to execute arbitrary commands via shell metacharacters in the ip parameter to backupmgt/getAlias.php.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Seagate | Blackarmor Nas 220 Firmware | Version sg2000-2000.1331 |
Weakness classification
References
- NVD record
- CVE.org record
- http://packetstormsecurity.com/files/124688/Seagate-BlackArmor-NAS-sg2000-2000.1331-Remote-Command-Execution.html
- http://www.securityfocus.com/bid/64655
- https://exchange.xforce.ibmcloud.com/vulnerabilities/90109
- http://packetstormsecurity.com/files/124688/Seagate-BlackArmor-NAS-sg2000-2000.1331-Remote-Command-Execution.html
- http://www.securityfocus.com/bid/64655
- https://exchange.xforce.ibmcloud.com/vulnerabilities/90109