CVE-2018-5347

The CVE-2018-5347 entry concerns Seagate Personal Cloud’s Seagate Media Server. The vulnerability affects the .psp URL handling in the Django-based web application (views.py: uploadTelemetry and getLogs) where unsanitized GET parameters are passed to system commands, enabling unauthenticated comm...

CVE-2017-18263

Seagate Personal Cloud is affected: Seagate Media Server before 4.3.18.4 contains a directory traversal vulnerability in getPhotoPlaylistPhotos.psp via the url parameter. The issue can allow an attacker to retrieve sensitive information from the NAS. No exploit details are provided in the sources...