Update CVE-2014-3206.yaml
parent
9e4d5f0d23
commit
e089bd841a
|
@ -1,19 +1,19 @@
|
|||
id: CVE-2014-3206
|
||||
|
||||
info:
|
||||
name: Seagate BlackArmor NAS - command injection
|
||||
name: Seagate BlackArmor NAS - Command Injection
|
||||
author: gy741
|
||||
severity: critical
|
||||
description: Seagate BlackArmor NAS allows remote attackers to execute arbitrary code via the session parameter to localhost/backupmgt/localJob.php or the auth_name parameter to localhost/backupmgmt/pre_connect_check.php.
|
||||
reference:
|
||||
- https://nvd.nist.gov/vuln/detail/CVE-2014-3206
|
||||
- https://www.exploit-db.com/exploits/33159
|
||||
tags: cve,cve2014,nas,seagate,mirai,gafgyt,rce
|
||||
classification:
|
||||
cvss-metrics: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
|
||||
cvss-score: 9.80
|
||||
cve-id: CVE-2014-3206
|
||||
cwe-id: CWE-20
|
||||
tags: cve,cve2014,seagate,rce
|
||||
|
||||
requests:
|
||||
- raw:
|
||||
|
|
Loading…
Reference in New Issue