VYPR

Personal Cloud

by Seagate

CVEs (1)

  • CVE-2018-5347CriJan 12, 2018
    risk 0.71cvss 9.8epss 0.54

    Seagate Media Server in Seagate Personal Cloud has unauthenticated command injection in the uploadTelemetry and getLogs functions in views.py because .psp URLs are handled by the fastcgi.server component and shell metacharacters are mishandled.