CVE-2013-6923 - CVE House
Back to Database
Status published Medium CVE-2013-6923

Multiple cross-site scripting (XSS) vulnerabilities in Seagate BlackArmor NAS 220...

Vulnerability Description

Multiple cross-site scripting (XSS) vulnerabilities in Seagate BlackArmor NAS 220 devices with firmware sg2000-2000.1331 allow remote attackers to inject arbitrary web script or HTML via the (1) fullname parameter to admin/access_control_user_edit.php or (2) workname parameter to admin/network_workgroup_domain.php.

Impact Analysis

Refer to official advisory for detailed impact metrics.

Remediation

Ensure systems are updated to the latest vendor-supplied patch levels.

THREAT MONITOR

Am I Vulnerable?

Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2013-6923

Credits & Attribution

No credits recorded in the NVD database.

References

More from seagate

View All →
CVE-2021-43429
A Denial of Service vulnerability exists in CORTX-S3 Server as...
High 7.5
CVE-2020-6627
The web-management application on Seagate Central NAS STCG2000300, STCG3000300, and...
Unknown 0
CVE-2018-5347
Seagate Media Server in Seagate Personal Cloud has unauthenticated command...
Critical 9.8
CVE-2018-12304
Cross-site scripting in Application Manager in Seagate NAS OS version...
Medium 6.1
CVE-2018-12303
Cross-site scripting in filebrowser in Seagate NAS OS version 4.3.15.1...
Medium 5.4

Affected Vendor

Affected Software

blackarmor nas 220 firmware, blackarmor nas 220
Vulnerable Versions:
sg2000-2000.1331, st320005lsa10g-rk, st340005lsa10g-rk, stav6000100

Timeline

Official Publish: January 9th, 2014
Last Modified: August 6th, 2024
Added to House: July 19th, 2026

CVSS Vectors

Weaknesses (CWE)

No CWE data available

MITRE ATT&CK TTPs

No associated TTPs found for this vulnerability.