Drobo vulnerabilities

Products

• 5n2 Firmware 15

Newest

• drobo 5n2 firmware Lack of Authentication/Authorization on Administrative Web Pages CVE-2018-14705 9.8 CriticalFebruary 24, 2020
• drobo 5n2 firmware Incorrect access control in the Dashboard API on Drobo 5N2 NAS version 4.0.5-13.28.96115 allows... CVE-2018-14709 9.8 CriticalDecember 3, 2018
• drobo 5n2 firmware An insecure transport protocol used by Drobo Dashboard API on Drobo 5N2 NAS version 4.0.5-13.28... CVE-2018-14708 9.8 CriticalDecember 3, 2018
• drobo 5n2 firmware Directory traversal in the Drobo Pix web application on Drobo 5N2 NAS version 4.0.5-13.28.96115... CVE-2018-14707 EPSS 27.8% 7.5 HighDecember 3, 2018
• drobo 5n2 firmware System command injection in the /DroboPix/api/drobopix/demo endpoint on Drobo 5N2 NAS version 4.0... CVE-2018-14706 EPSS 17.1% 9.8 CriticalDecember 3, 2018
• drobo 5n2 firmware Cross-site scripting in the MySQL API error page in Drobo 5N2 NAS version 4.0.5-13.28.96115... CVE-2018-14704 6.1 MediumDecember 3, 2018
• drobo 5n2 firmware Incorrect access control in the /mysql/api/droboapp/data endpoint in Drobo 5N2 NAS version 4.0.5... CVE-2018-14703 9.8 CriticalDecember 3, 2018
• drobo 5n2 firmware Incorrect access control in the /drobopix/api/drobo.php endpoint in Drobo 5N2 NAS version 4.0.5... CVE-2018-14702 7.5 HighDecember 3, 2018
• drobo 5n2 firmware System command injection in the /DroboAccess/delete_user endpoint in Drobo 5N2 NAS version 4.0.5... CVE-2018-14701 EPSS 20.0% 9.8 CriticalDecember 3, 2018
• drobo 5n2 firmware Incorrect access control in the /mysql/api/logfile.php endpoint in Drobo 5N2 NAS version 4.0.5-13... CVE-2018-14700 7.5 HighDecember 3, 2018
• drobo 5n2 firmware System command injection in the /DroboAccess/enable_user endpoint in Drobo 5N2 NAS version 4.0.5... CVE-2018-14699 Public exploit EPSS 29.4% 9.8 CriticalDecember 3, 2018
• drobo 5n2 firmware Cross-site scripting in the /DroboAccess/delete_user endpoint in Drobo 5N2 NAS version 4.0.5-13... CVE-2018-14698 6.1 MediumDecember 3, 2018
• drobo 5n2 firmware Cross-site scripting in the /DroboAccess/enable_user endpoint in Drobo 5N2 NAS version 4.0.5-13... CVE-2018-14697 6.1 MediumDecember 3, 2018
• drobo 5n2 firmware Incorrect access control in the /mysql/api/drobo.php endpoint in Drobo 5N2 NAS version 4.0.5-13... CVE-2018-14696 7.5 HighDecember 3, 2018
• drobo 5n2 firmware Incorrect access control in the /mysql/api/diags.php endpoint in Drobo 5N2 NAS version 4.0.5-13... CVE-2018-14695 7.5 HighDecember 3, 2018