Seagate Vulnerabilities

Timeline

The data in this chart does not reflect real data. It is dummy data, distorted and not usable in any way. You need an additional purchase to unlock this view to get access to more details of real data.

Type

Not Defined	24
Cloud Software	2

Product

Seagate NAS OS	12
Seagate BlackArmor NAS	6
Seagate Storage	2
Seagate Central NAS STCG2000300	2
Seagate Central NAS STCG3000300	2

Remediation

Official Fix	8
Temporary Fix	0
Workaround	0
Unavailable	2
Not Defined	16

Exploitability

High	4
Functional	0
Proof-of-Concept	6
Unproven	2
Not Defined	14

Access Vector

Not Defined	0
Physical	0
Local	0
Adjacent	2
Network	24

Authentication

Not Defined	0
High	0
Low	4
None	22

User Interaction

Not Defined	0
Required	8
None	18

C3BM Index

CVSSv3 Base

≤1	0
≤2	0
≤3	0
≤4	0
≤5	2
≤6	4
≤7	4
≤8	6
≤9	6
≤10	4

CVSSv3 Temp

≤1	0
≤2	0
≤3	0
≤4	0
≤5	2
≤6	4
≤7	4
≤8	8
≤9	8
≤10	0

VulDB

≤1	0
≤2	0
≤3	0
≤4	0
≤5	6
≤6	4
≤7	0
≤8	12
≤9	0
≤10	4

NVD

≤1	0
≤2	0
≤3	0
≤4	0
≤5	0
≤6	2
≤7	6
≤8	4
≤9	2
≤10	10

CNA

≤1	0
≤2	0
≤3	0
≤4	0
≤5	0
≤6	0
≤7	0
≤8	0
≤9	0
≤10	0

Vendor

≤1	0
≤2	0
≤3	0
≤4	0
≤5	0
≤6	0
≤7	0
≤8	0
≤9	0
≤10	0

Research

≤1	0
≤2	0
≤3	0
≤4	0
≤5	0
≤6	0
≤7	0
≤8	0
≤9	0
≤10	0

Exploit 0-day

<1k	0
<2k	16
<5k	10
<10k	0
<25k	0
<50k	0
<100k	0
≥100k	0

Exploit Today

<1k	26
<2k	0
<5k	0
<10k	0
<25k	0
<50k	0
<100k	0
≥100k	0

Exploit Market Volume

🔴 CTI Activities

Affected Products (11): BlackArmor NAS (5), BlackArmor NAS 220 (2), Business NAS (1), CORTX-S3 Server (1), Central NAS STCG2000300 (1), Central NAS STCG3000300 (1), Central NAS STCG4000300 (1), NAS OS (10), Personal Cloud (2), ST500LT015 (1), Storage (3)

Published	Base	Temp	Vulnerability	Prod	Exp	Rem	EPSS	CTI	CVE
03/05/2023	6.3	5.7	Seagate BlackArmor NAS command injection	Unknown	Proof-of-Concept	Not Defined	0.00000	0.00	CVE-2014-2701
12/06/2022	7.6	7.5	Seagate Central NAS STCG4000300 Web-Management Application mv_backend_helper.php mv_backend_launch os command injection	Unknown	High	Official Fix	0.03232	0.00	CVE-2020-6627
04/07/2022	3.5	3.2	Seagate CORTX-S3 Server mempool_destroy denial of service	Unknown	Not Defined	Official Fix	0.00088	0.00	CVE-2021-43429
05/13/2019	5.4	5.4	Seagate NAS OS Application Manager cross site scripting	Unknown	Not Defined	Not Defined	0.00105	0.00	CVE-2018-12304
05/13/2019	4.7	4.7	Seagate NAS OS filebrowser cross site scripting	Unknown	Not Defined	Not Defined	0.00058	0.03	CVE-2018-12303
05/13/2019	6.6	6.6	Seagate NAS OS Session Cookie httponly cross site scripting	Unknown	Not Defined	Not Defined	0.00078	0.03	CVE-2018-12302
05/13/2019	7.4	7.4	Seagate NAS OS Download Manager Loopback information disclosure	Unknown	Not Defined	Not Defined	0.00168	0.00	CVE-2018-12301
05/13/2019	5.4	5.4	Seagate NAS OS Referer Header echo-server.html redirect	Unknown	Not Defined	Not Defined	0.00118	0.00	CVE-2018-12300
05/13/2019	4.7	4.7	Seagate NAS OS filebrowser cross site scripting	Unknown	Not Defined	Not Defined	0.00058	0.00	CVE-2018-12299
05/13/2019	6.4	6.4	Seagate NAS OS path traversal	Unknown	Not Defined	Not Defined	0.00902	0.00	CVE-2018-12298

16 more entries are not shown

🔒 Login Required

You need to signup and login to see more of the remaining 16 results.

◂ PreviousOverviewNext ▸

Do you want to use VulDB in your project?

Use the official API to access entries easily!