Remote Code Execution Vulnerability in Seagate Business NAS Devices

CVE-2014-8687

What is CVE-2014-8687?

Seagate Business NAS devices with firmware prior to version 2015.00322 are vulnerable to a remote code execution flaw. This vulnerability arises from the improper use of a static encryption key, allowing remote attackers to forge session tokens and execute arbitrary code with root privileges. Inadequate access controls enable an attacker to exploit this weakness, potentially leading to unauthorized access and manipulation of the compromised network storage resources.

Exploit Proof of Concept (PoC)

PoC code is written by security researchers to demonstrate the vulnerability can be exploited. PoC code is also a key component for weaponization which could lead to ransomware.

Metasploit exploit module for CVE-2014-8687
Created by Rapid7

References