CVE-2014-3206: Input Validation
Published Feb 23, 2018
·Updated
Seagate BlackArmor NAS allows remote attackers to execute arbitrary code via the session parameter to localhost/backupmgt/localJob.php or the authname parameter to localhost/backupmgmt/preconnectcheck.php.
Affected Software
4 affected components
Seagate Blackarmor Nas 220 Firmware
Seagate BlackArmor NAS 220
Seagate Blackarmor Nas 110 Firmware
Seagate Blackarmor Nas 110
Event History
Feb 23, 2018
CVE Published
via MITRE·05:00 PM
Data Sourced
via MITRE·05:00 PM
Description
Frequently Asked Questions
1
What is the severity of CVE-2014-3206?
CVE-2014-3206 has a CVSS score of 9.3, indicating it's a critical vulnerability.
2
How do I fix CVE-2014-3206?
To fix CVE-2014-3206, update your Seagate BlackArmor NAS to the latest firmware version.
3
What systems are affected by CVE-2014-3206?
CVE-2014-3206 affects Seagate BlackArmor NAS 220 and 110 firmware versions.
4
What kind of attack is possible with CVE-2014-3206?
CVE-2014-3206 allows remote attackers to execute arbitrary code on the affected systems.
5
How can I determine if my device is vulnerable to CVE-2014-3206?
Check the firmware version of your Seagate BlackArmor NAS device against the known affected versions for CVE-2014-3206.