CVE-2018-14707

Directory traversal in the Drobo Pix web application on Drobo 5N2 NAS version 4.0.5-13.28.96115 allows unauthenticated attackers to upload files to arbitrary…

published December 3, 2018

CVSS
—
EPSS
28%
Percentile
98.1
In the wild
Unconfirmed
What it is

Directory traversal in the Drobo Pix web application on Drobo 5N2 NAS version 4.0.5-13.28.96115 allows unauthenticated attackers to upload files to arbitrary locations.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.27824 · 98.1th percentile
Published
2018-12-03T22:00Z
EPSS history
Timeline
  • 22 SEP 03:15Z
    EPSS moved 28% → 18%
    epss
  • 06 SEP 03:11Z
    EPSS moved 28% → 18%
    epss
  • 30 AUG 16:00Z
    EPSS moved 18% → 28%
    epss
  • 29 AUG 04:33Z
    EPSS moved 28% → 18%
    epss
  • 03 DEC 22:00Z
    Directory traversal in the Drobo Pix web application on Drobo 5N2 NAS version 4.0.5-13.28.96115 allows unauthenticated attackers to upload files to arbitrary…
    cvelistv5