CVE-2013-6923: XSS
Multiple cross-site scripting (XSS) vulnerabilities in Seagate BlackArmor NAS 220 devices with firmware sg2000-2000.1331 allow remote attackers to inject arbitrary web script or HTML via the (1) fullname parameter to admin/accesscontroluseredit.php or (2) workname parameter to admin/networkworkgroupdomain.php.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2013-6923?
CVE-2013-6923 is classified as a high severity vulnerability due to its ability to allow remote code execution via XSS.
How do I fix CVE-2013-6923?
To address CVE-2013-6923, users should update the firmware of their Seagate BlackArmor NAS 220 devices to the latest version provided by Seagate.
What are the affected devices for CVE-2013-6923?
CVE-2013-6923 affects Seagate BlackArmor NAS 220 devices with firmware version sg2000-2000.1331.
What type of attacks can CVE-2013-6923 facilitate?
CVE-2013-6923 can facilitate cross-site scripting (XSS) attacks by allowing attackers to inject arbitrary web scripts into the device.
What parameters are vulnerable in CVE-2013-6923?
The vulnerable parameters in CVE-2013-6923 are the fullname parameter to admin/access_control_user_edit.php and the workname parameter to admin/network_workgroup_edit.php.