CVE-2014-3205 is a critical vulnerability affecting Seagate BlackArmor NAS devices, specifically models 110 and 220, due to a hard-coded backdoor password in the backupmgt/pre_connect_check.php file. This vulnerability has a CVSS score of 9.8, indicating a severe risk with network-based exploitation requiring no authentication, leading to complete compromise of confidentiality, integrity, and availability. While there is no evidence of active exploitation in the wild or publicly available exploit code in Metasploit or ExploitDB, the vulnerability has garnered significant community discussion, with over 10 mentions.
| Vendor | Product | Version(s) | CPE |
|---|---|---|---|
Range not provided by sourceCPE matchmatch criteria | cpe:2.3:o:seagate:blackarmor_nas_220_firmware:-:*:*:*:*:*:*:* | ||
Range not provided by sourceCPE matchmatch criteria | cpe:2.3:o:seagate:blackarmor_nas_110_firmware:-:*:*:*:*:*:*:* |
CVSS version used by this source: 3.0
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
The average CVE in this peer group has 0.0 Twitter, 0.1 Reddit, 0.3 Bluesky, 0.3 Mastodon, and 2.4 GitHub mentions.
No media coverage found for this CVE.
The average CVE in this peer group has 0.3 InfoSec Media, 0.0 Vendor Blog, and 0.0 Security Researcher mentions.
Remediation records are not available for this CVE.