CVE-2013-6922: CSRF
Multiple cross-site request forgery (CSRF) vulnerabilities in the Seagate BlackArmor NAS 220 devices with firmware sg2000-2000.1331 allow remote attackers to hijack the authentication of administrators for requests that (1) add user accounts via a crafted request to admin/accesscontroluseradd.php; (2) modify or (3) delete user accounts; (4) perform a factory reset; (5) perform a device reboot; or (6) add, (7) modify, or (8) delete shares and volumes.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2013-6922?
CVE-2013-6922 is classified as a high severity vulnerability due to its potential to allow unauthorized access to administrative functions.
How do I fix CVE-2013-6922?
To fix CVE-2013-6922, it is crucial to update the firmware of the Seagate BlackArmor NAS 220 devices to a version that does not have this vulnerability.
What systems are affected by CVE-2013-6922?
CVE-2013-6922 affects Seagate BlackArmor NAS 220 devices specifically with firmware version sg2000-2000.1331.
What type of vulnerability is CVE-2013-6922?
CVE-2013-6922 is a Cross-Site Request Forgery (CSRF) vulnerability that can lead to unauthorized actions performed on behalf of an authenticated user.
Can CVE-2013-6922 allow remote attacks?
Yes, CVE-2013-6922 can allow remote attackers to hijack administrator sessions and perform unauthorized actions.