CVE-2013-6924

Affected product: Seagate BlackArmor NAS sg2000-2000.1331. Vulnerability details: The firmware exposes an HTTP parameter in backupmgt/getAlias.php where a user-supplied ip value is used in shell commands (via grep/exec) without proper sanitization, allowing manipulation of the command line. This ...

CVE-2013-6922

Multiple cross-site request forgery CSRF vulnerabilities in the Seagate BlackArmor NAS 220 devices with firmware sg2000-2000.1331 allow remote attackers to hijack the authentication of administrators for requests that 1 add user accounts via a crafted request to admin/accesscontroluseradd.php; 2...

Seagate BlackArmor NAS sg2000-2000.1331 - Remote Command Execution

Seagate BlackArmor NAS sg2000-2000.1331 - Remote Command Execution Exploit Title: Seagate BlackArmor NAS - Remote Command Execution Google Dork: N/A Date: 04-01-2014 Exploit Author: Jeroen - IT Nerdbox Vendor Homepage: http://www.seagate.com/ Software Link:...