PT-2014-3217 · Seagate · Seagate Blackarmor Nas 220

Jeroen · Published 2014-01-21 · Updated 2014-01-22 · CVE-2013-6922

Positive Technologies (AI Summary)

CVSS v2.0

6.8

Medium

Base vector

AV:N/AC:M/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions Seagate BlackArmor NAS 220 version sg2000-2000.1331

Description The issue affects the Seagate BlackArmor NAS 220 devices, allowing remote attackers to hijack the authentication of administrators. This can be achieved through multiple cross-site request forgery (CSRF) vulnerabilities for various actions, including adding user accounts via a crafted request to "admin/access control user add.php", modifying or deleting user accounts, performing a factory reset, rebooting the device, or adding, modifying, or deleting shares and volumes.

Recommendations For Seagate BlackArmor NAS 220 version sg2000-2000.1331, consider disabling access to the "admin/access control user add.php" endpoint until a patch is available. Restrict access to user account modification and deletion functions to minimize the risk of exploitation. Avoid using the device's factory reset, reboot, and share and volume management features until the issue is resolved. As a temporary workaround, limit administrative access to the device to prevent potential hijacking of authentication. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

CSRF

Weakness Enumeration

CWE-352

Related Identifiers

CVE-2013-6922

Affected Products

Seagate Blackarmor Nas 220

References · 4

• 🔥 http://exploit-db.com/exploits/30726 · Exploit
• 🔥 https://exploit-db.com/exploits/30726 · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2013-6922 · Security Note
• http://secunia.com/advisories/56047 · Vendor Advisory