System command injection in the /DroboAccess/delete_user endpoint in Drobo 5N2 NAS version 4.0.5-13.28.96115 allows unauthenticated attackers to execute system commands via the "username" URL parameter.
References
History
No history.
MITRE Information
Status: PUBLISHED
Assigner: mitre
Published: 2018-12-03T22:00:00
Updated: 2020-03-13T17:06:02
Reserved: 2018-07-28T00:00:00
Link: CVE-2018-14701
JSON object: View
NVD Information
Status : Modified
Published: 2018-12-03T22:29:00.467
Modified: 2020-03-13T18:15:11.733
Link: CVE-2018-14701
JSON object: View
Redhat Information
No data.
CWE