Drobo 5N2 Directory Traversal Vulnerability

Drobo 5N2 NAS is a networked storage device NAS from Drobo, USA. The device has features such as data sharing, data backup, remote access and disaster recovery.Drobo Pix Web application is one of the applications that provides mobile backup functionality. A directory traversal vulnerability exist...

Directory traversal

Directory traversal in the Drobo Pix web application on Drobo 5N2 NAS version 4.0.5-13.28.96115 allows unauthenticated attackers to upload files to arbitrary locations...

CVE-2018-14707

Directory traversal in the Drobo Pix web application on Drobo 5N2 NAS version 4.0.5-13.28.96115 allows unauthenticated attackers to upload files to arbitrary locations...

CVE-2018-14707

Directory traversal in the Drobo Pix web application on Drobo 5N2 NAS version 4.0.5-13.28.96115 allows unauthenticated attackers to upload files to arbitrary locations...

CVE-2018-14706

System command injection in the /DroboPix/api/drobopix/demo endpoint on Drobo 5N2 NAS version 4.0.5-13.28.96115 allows unauthenticated attackers to execute system commands via the payload in a POST request...

CVE-2018-14707

Directory traversal in the Drobo Pix web application on Drobo 5N2 NAS version 4.0.5-13.28.96115 allows unauthenticated attackers to upload files to arbitrary locations...

CVE-2018-14707

CVE-2018-14707 describes a directory traversal in the Drobo Pix web application of Drobo 5N2 NAS (version 4.0.5-13.28.96115). The vulnerability allows unauthenticated attackers to upload files to arbitrary locations. Multiple connected sources corroborate a DroboPix-related path traversal affecti...