CVE-2013-6922

Multiple cross-site request forgery (CSRF) vulnerabilities in the Seagate BlackArmor NAS 220 devices with firmware sg2000-2000.1331 allow remote attackers to…

published January 21, 2014

CVSS
—
EPSS
1%
Percentile
71.3
In the wild
Unconfirmed
What it is

Multiple cross-site request forgery (CSRF) vulnerabilities in the Seagate BlackArmor NAS 220 devices with firmware sg2000-2000.1331 allow remote attackers to hijack the authentication of administrators for requests that (1) add user accounts via a crafted request to admin/access_control_user_add.php; (2) modify or (3) delete user accounts; (4) perform a factory reset; (5) perform a device reboot; or (6) add, (7) modify, or (8) delete shares and volumes.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.01358 · 71.3th percentile
Published
2014-01-21T16:00Z
EPSS history
Timeline
  • 21 JAN 16:00Z
    Multiple cross-site request forgery (CSRF) vulnerabilities in the Seagate BlackArmor NAS 220 devices with firmware sg2000-2000.1331 allow remote attackers to…
    cvelistv5