Vulners
Lucene search
2 matches found
CVE-2018-14701
System command injection in the /DroboAccess/deleteuser endpoint in Drobo 5N2 NAS version 4.0.5-13.28.96115 allows unauthenticated attackers to execute system commands via the "username" URL parameter...
9.8CVSS5.9AI score0.50208EPSS
Exploits5References2
CVE-2018-14699
System command injection in the /DroboAccess/enableuser endpoint in Drobo 5N2 NAS version 4.0.5-13.28.96115 allows unauthenticated attackers to execute system commands via the "username" URL parameter...
9.8CVSS5.9AI score0.69475EPSS
Exploits1References1
20