CVE-2013-6922 - CVE House
Back to Database
Status published Medium CVE-2013-6922

Multiple cross-site request forgery (CSRF) vulnerabilities in the Seagate BlackArmor...

Vulnerability Description

Multiple cross-site request forgery (CSRF) vulnerabilities in the Seagate BlackArmor NAS 220 devices with firmware sg2000-2000.1331 allow remote attackers to hijack the authentication of administrators for requests that (1) add user accounts via a crafted request to admin/access_control_user_add.php; (2) modify or (3) delete user accounts; (4) perform a factory reset; (5) perform a device reboot; or (6) add, (7) modify, or (8) delete shares and volumes.

Impact Analysis

Refer to official advisory for detailed impact metrics.

Remediation

Ensure systems are updated to the latest vendor-supplied patch levels.

THREAT MONITOR

Am I Vulnerable?

Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2013-6922

Credits & Attribution

No credits recorded in the NVD database.

References

More from seagate

View All →
CVE-2021-43429
A Denial of Service vulnerability exists in CORTX-S3 Server as...
High 7.5
CVE-2020-6627
The web-management application on Seagate Central NAS STCG2000300, STCG3000300, and...
Unknown 0
CVE-2018-5347
Seagate Media Server in Seagate Personal Cloud has unauthenticated command...
Critical 9.8
CVE-2018-12304
Cross-site scripting in Application Manager in Seagate NAS OS version...
Medium 6.1
CVE-2018-12303
Cross-site scripting in filebrowser in Seagate NAS OS version 4.3.15.1...
Medium 5.4

Affected Vendor

Affected Software

blackarmor nas 220 firmware, blackarmor nas 220
Vulnerable Versions:
sg2000-2000.1331, st320005lsa10g-rk, st340005lsa10g-rk, stav6000100

Timeline

Official Publish: January 21st, 2014
Last Modified: August 6th, 2024
Added to House: July 19th, 2026

CVSS Vectors

Weaknesses (CWE)

No CWE data available

MITRE ATT&CK TTPs

No associated TTPs found for this vulnerability.