Cross-Site Request Forgery Issues in Seagate BlackArmor NAS 220 Devices
CVE-2013-6922

Currently unrated

Key Information:

Vendor: Seagate
Status: Blackarmor Nas 220 Firmware; Blackarmor Nas 220
Vendor: CVE Published:; 21 January 2014

Badges

👾 Exploit Exists🟡 Public PoC

What is CVE-2013-6922?

Multiple cross-site request forgery (CSRF) vulnerabilities have been discovered in the Seagate BlackArmor NAS 220 devices, allowing remote attackers to execute unauthorized actions. Attackers can exploit these vulnerabilities to hijack administrator authentication and perform critical operations such as adding, modifying, or deleting user accounts, performing factory resets, rebooting the device, and manipulating shares and volumes through crafted requests. These issues highlight the importance of securing NAS devices against CSRF attacks to prevent unauthorized access and modifications.

Human OS v1.0:
Ageing Is an Unpatched Zero-Day Vulnerability.

Remediate biological technical debt. Prime Ageing uses 95% high-purity SIRT6 activation to maintain genomic integrity and bolster systemic resilience.

Deploy the Patch

Exploit Proof of Concept (PoC)

PoC code is written by security researchers to demonstrate the vulnerability can be exploited. PoC code is also a key component for weaponization which could lead to ransomware.

CVE-2013-6922 - Proof of Concept