Lucene search

K
cvelistMitreCVELIST:CVE-2018-14701
HistoryDec 03, 2018 - 10:00 p.m.

CVE-2018-14701

2018-12-0322:00:00
mitre
www.cve.org
7

AI Score

10

Confidence

High

EPSS

0.953

Percentile

99.4%

System command injection in the /DroboAccess/delete_user endpoint in Drobo 5N2 NAS version 4.0.5-13.28.96115 allows unauthenticated attackers to execute system commands via the “username” URL parameter.

AI Score

10

Confidence

High

EPSS

0.953

Percentile

99.4%