CVE-2014-3205: Critical severity seagate blackarmor nas 220 vulnerability
Published Feb 23, 2018
·Updated
backupmgt/preconnectcheck.php in Seagate BlackArmor NAS contains a hard-coded password of '!~@##$$%FREDESWWSED' for a backdoor user.
Affected Software
4 affected components
Seagate Blackarmor Nas 220 Firmware
Seagate BlackArmor NAS 220
Seagate Blackarmor Nas 110 Firmware
Seagate Blackarmor Nas 110
Event History
Feb 23, 2018
CVE Published
via MITRE·05:00 PM
Data Sourced
via MITRE·05:00 PM
Description
Frequently Asked Questions
1
What is the severity of CVE-2014-3205?
CVE-2014-3205 is considered to have a high severity due to the presence of a hard-coded password enabling unauthorized access.
2
How do I fix CVE-2014-3205?
To mitigate CVE-2014-3205, users should update their Seagate BlackArmor NAS to the latest firmware that addresses this vulnerability.
3
What software versions are affected by CVE-2014-3205?
CVE-2014-3205 affects Seagate BlackArmor NAS 110 and 220 firmware versions.
4
What are the potential risks associated with CVE-2014-3205?
The risks include unauthorized access to the storage device and potential data breaches due to the hard-coded backdoor password.
5
Is there a known exploit for CVE-2014-3205?
Yes, there are known exploits for CVE-2014-3205 that can be utilized to gain unauthorized access to affected devices.