CVE-2018-12301

HIGH

Seagate NAS OS 4.3.15.1 - Exposure of Sensitive Information via Download Manager URL

Title source: llm
STIX 2.1

Description

Unvalidated URL in Download Manager in Seagate NAS OS version 4.3.15.1 allows attackers to access the loopback interface via a Download URL of 127.0.0.1 or localhost.

References (1)

Core 1

Scores

CVSS v3 7.5
EPSS 0.0141
EPSS Percentile 69.3%
Attack Vector NETWORK
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

Details

CWE
CWE-200
Status published
Products (1)
seagate/nas_os 4.3.15.1
Published May 13, 2019
Tracked Since Feb 18, 2026