| Reporter | Title | Published | Views | Family All 9 |
|---|---|---|---|---|
| Seagate Personal Cloud - Multiple Vulnerabilities | 17 Jan 201800:00 | – | zdt | |
| The vulnerability of the uploadTelemetry and getLogs functions of the Media Server component in the Seagate Personal Cloud software, allowing a hacker to execute arbitrary commands. | 6 Mar 201800:00 | – | bdu_fstec | |
| Seagate Personal Cloud Seagate Media Server Command Injection Vulnerability | 17 Jan 201800:00 | – | cnvd | |
| CVE-2018-5347 | 12 Jan 201801:00 | – | cvelist | |
| CVE-2018-5347 | 12 Jan 201801:29 | – | nvd | |
| Seagate Personal Cloud < 4.3.18.0 RCE Vulnerability | 15 Jun 201800:00 | – | openvas | |
| Seagate Personal Cloud Command Injection | 16 Jan 201800:00 | – | packetstorm | |
| Command injection | 12 Jan 201801:29 | – | prion | |
| Seagate Personal Cloud Multiple Vulnerabilities(CVE-2018-5347) | 10 May 201800:00 | – | seebug |
| Source | Link |
|---|---|
| exploit-db | www.exploit-db.com/exploits/43659/ |
| blogs | www.blogs.securiteam.com/index.php/archives/3548 |
| Parameter | Position | Path | Description | CWE |
|---|---|---|---|---|
| TimeStamp | query param | uploadTelemetry.psp | Unauthenticated command injection via TimeStamp parameter passed to shell command in uploadTelemetry view. | CWE-78 |
| arch_id | query param | getLogs.psp | Unauthenticated command injection via arch_id/time_stamp parameters used to construct shell commands in getLogs view. | CWE-78 |
| time_stamp | query param | getLogs.psp | Unauthenticated command injection via arch_id/time_stamp parameters used to construct shell commands in getLogs view. | CWE-78 |
Data
Build on a solid foundation with Vulners data
We provide the essential building blocks for cybersecurity solutions with comprehensive, structured, and constantly updated vulnerability and exploits data
Api
Power your application with Vulners API
The Vulners REST API offers reliable, high-performance access to vulnerability intelligence, with 99.9% SLA uptime and CDN-backed data delivery for seamless global access
App
Assess and manage vulnerabilities with Vulners tools
Built on top of Vulners' database and SDK, end-user solutions give security professionals and developers lightweight and powerful tools for vulnerability remediation