CVE-2018-5347 | BDVDB-2026-95203 Detail

Description#

Seagate Media Server in Seagate Personal Cloud has unauthenticated command injection in the uploadTelemetry and getLogs functions in views.py because .psp URLs are handled by the fastcgi.server component and shell metacharacters are mishandled.

Impact#

No impact statement in the source data.

Weaknesses#

No weakness recorded in the source data.

References#

https://www.exploit-db.com/exploits/43659/
https://blogs.securiteam.com/index.php/archives/3548

Exploit#

https://www.exploit-db.com/exploits/43659/

History#

Version 12018-01-12Record published in the CVE List.
Version 22024-08-05Most recent update recorded in the CVE List.