CVE Catalog
CVE-2013-6924
CriticalSummary
Seagate BlackArmor NAS devices with firmware sg2000-2000.1331 allow remote attackers to execute arbitrary commands via shell metacharacters in the ip parameter to backupmgt/getAlias.php.
Risk Assessment
Attackers may gain full control over the device, potentially leading to data loss or network security breaches.
Recommendation
It is recommended to update the firmware to the latest version and restrict access to the NAS management interface.
Original NVD description (English source)
Seagate BlackArmor NAS devices with firmware sg2000-2000.1331 allow remote attackers to execute arbitrary commands via shell metacharacters in the ip parameter to backupmgt/getAlias.php.