{"cve":"CVE-2014-3206","epss":{"score":0.51014},"mitre":{"cpes":[],"created":"2018-02-23T17:00:00+00:00","description":"Seagate BlackArmor NAS allows remote attackers to execute arbitrary code via the session parameter to localhost/backupmgt/localJob.php or the auth_name parameter to localhost/backupmgmt/pre_connect_check.php.","metrics":{"cvssV2_0":{},"cvssV3_0":{},"cvssV3_1":{},"cvssV4_0":{}},"mitre_repo_path":"cves/2014/3xxx/CVE-2014-3206.json","references":["https://www.exploit-db.com/exploits/33159/"],"title":null,"updated":"2024-08-06T10:35:56.972000+00:00","vendors":[],"weaknesses":[]},"nvd":{"cpes":["cpe:2.3:h:seagate:blackarmor_nas_110:-:*:*:*:*:*:*:*","cpe:2.3:h:seagate:blackarmor_nas_220:-:*:*:*:*:*:*:*","cpe:2.3:o:seagate:blackarmor_nas_110_firmware:-:*:*:*:*:*:*:*","cpe:2.3:o:seagate:blackarmor_nas_220_firmware:-:*:*:*:*:*:*:*"],"created":"2018-02-23T17:29:00.410000+00:00","description":"Seagate BlackArmor NAS allows remote attackers to execute arbitrary code via the session parameter to localhost/backupmgt/localJob.php or the auth_name parameter to localhost/backupmgmt/pre_connect_check.php.","metrics":{"cvssV2_0":{"score":10.0,"vector":"AV:N/AC:L/Au:N/C:C/I:C/A:C"},"cvssV3_0":{"score":9.8,"vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H"},"cvssV3_1":{},"cvssV4_0":{}},"nvd_repo_path":"2014/CVE-2014-3206.json","references":["https://www.exploit-db.com/exploits/33159/"],"title":null,"updated":"2026-06-17T00:07:48.210000+00:00","vendors":["seagate","seagate$PRODUCT$blackarmor_nas_110","seagate$PRODUCT$blackarmor_nas_110_firmware","seagate$PRODUCT$blackarmor_nas_220","seagate$PRODUCT$blackarmor_nas_220_firmware"],"weaknesses":["CWE-20"]},"opencve":{"changes":[],"cpes":{"data":["cpe:2.3:h:seagate:blackarmor_nas_110:-:*:*:*:*:*:*:*","cpe:2.3:h:seagate:blackarmor_nas_220:-:*:*:*:*:*:*:*","cpe:2.3:o:seagate:blackarmor_nas_110_firmware:-:*:*:*:*:*:*:*","cpe:2.3:o:seagate:blackarmor_nas_220_firmware:-:*:*:*:*:*:*:*"],"providers":["nvd"]},"created":{"data":"2018-02-23T17:00:00+00:00","provider":"mitre"},"description":{"data":"Seagate BlackArmor NAS allows remote attackers to execute arbitrary code via the session parameter to localhost/backupmgt/localJob.php or the auth_name parameter to localhost/backupmgmt/pre_connect_check.php.","provider":"mitre"},"metrics":{"cvssV2_0":{"data":{"score":10.0,"vector":"AV:N/AC:L/Au:N/C:C/I:C/A:C"},"provider":"nvd"},"cvssV3_0":{"data":{"score":9.8,"vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H"},"provider":"nvd"},"cvssV3_1":{"data":{},"provider":null},"cvssV4_0":{"data":{},"provider":null},"epss":{"data":{"score":0.51014},"provider":"first"},"kev":{"data":{},"provider":null},"ssvc":{"data":{},"provider":null},"threat_severity":{"data":null,"provider":null}},"references":{"data":["https://www.exploit-db.com/exploits/33159/"],"providers":["mitre","nvd"]},"title":{"data":null,"provider":null},"updated":{"data":"2024-11-21T02:07:40.993000+00:00","provider":"nvd"},"vendors":{"data":["seagate","seagate$PRODUCT$blackarmor_nas_110","seagate$PRODUCT$blackarmor_nas_110_firmware","seagate$PRODUCT$blackarmor_nas_220","seagate$PRODUCT$blackarmor_nas_220_firmware"],"providers":["nvd"]},"weaknesses":{"data":["CWE-20"],"providers":["nvd"]}}}