CVE-2014-8687

Critical

Published: 08/06/2017(UTC)Translated: 14/06/2026(UTC)NVD NIST

Summary

Seagate Business NAS devices with firmware before version 2015.00322 allow remote attackers to execute arbitrary code with root privileges by leveraging the use of a static encryption key to create session tokens.

Risk Assessment

Attackers can gain full control over the device, potentially leading to data breaches or system compromise.

Recommendation

It is recommended to update the firmware of Seagate Business NAS devices to the latest version to mitigate this vulnerability.

Original NVD description (English source)

Seagate Business NAS devices with firmware before 2015.00322 allow remote attackers to execute arbitrary code with root privileges by leveraging use of a static encryption key to create session tokens.