Remote Code Execution Vulnerability in Seagate BlackArmor NAS

CVE-2014-3206 · HIGH Severity

AV:N/AC:L/AU:N/C:C/I:C/A:C

Seagate BlackArmor NAS allows remote attackers to execute arbitrary code via the session parameter to localhost/backupmgt/localJob.php or the auth_name parameter to localhost/backupmgmt/pre_connect_check.php.

Learn more about our Web Application Penetration Testing UK.