← All advisories

High severity7.5NVD Advisory· Published Apr 28, 2018· Updated Jun 17, 2026

CVE-2017-18263

CVE-2017-18263

Description

Seagate Media Server in Seagate Personal Cloud before 4.3.18.4 has directory traversal in getPhotoPlaylistPhotos.psp via a parameter named url.

Affected products

2

Seagate/Personal Cloud Firmware
cpe:2.3:o:seagate:personal_cloud_firmware:*:*:*:*:*:*:*:*
Range: <4.3.18.4
Seagate/Media Serverllm-create
Range: <4.3.18.4

Patches

Vulnerability mechanics

References

2

sumofpwn.nl/advisory/2017/seagate-media-server-path-traversal-vulnerability.htmlnvdExploitThird Party Advisory
packetstormsecurity.com/files/147274/Seagate-Media-Server-Path-Traversal.htmlnvdThird Party AdvisoryVDB Entry

News mentions

0

No linked articles in our index yet.