Your browser does not seem to support JavaScript. As a result, your viewing experience will be diminished, and you may not be able to execute some actions.

Please download a browser that supports JavaScript, or enable it if it's disabled (i.e. NoScript).

CVE-2018-5347 (personal_cloud_firmware)

maltiger last edited by

Seagate Media Server in Seagate Personal Cloud has unauthenticated command injection in the uploadTelemetry and getLogs functions in views.py because .psp URLs are handled by the fastcgi.server component and shell metacharacters are mishandled.

https://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2018-5347
Reply Quote
1 Reply Last reply

1
Posts

120
Views

Log in to reply

© Lightnetics 2024

1 / 1