Skip to content

Drobo 5n2 Firmware vulnerabilities

drobo 5n2 firmwareLack of Authentication/Authorization on Administrative Web PagesCVE-2018-147059.8 CriticalFebruary 24, 2020
drobo 5n2 firmwareIncorrect access control in the Dashboard API on Drobo 5N2 NAS version 4.0.5-13.28.96115 allows...CVE-2018-147099.8 CriticalDecember 3, 2018
drobo 5n2 firmwareAn insecure transport protocol used by Drobo Dashboard API on Drobo 5N2 NAS version 4.0.5-13.28...CVE-2018-147089.8 CriticalDecember 3, 2018
drobo 5n2 firmwareDirectory traversal in the Drobo Pix web application on Drobo 5N2 NAS version 4.0.5-13.28.96115...CVE-2018-14707EPSS 27.8%7.5 HighDecember 3, 2018
drobo 5n2 firmwareSystem command injection in the /DroboPix/api/drobopix/demo endpoint on Drobo 5N2 NAS version 4.0...CVE-2018-14706EPSS 17.1%9.8 CriticalDecember 3, 2018
drobo 5n2 firmwareCross-site scripting in the MySQL API error page in Drobo 5N2 NAS version 4.0.5-13.28.96115...CVE-2018-147046.1 MediumDecember 3, 2018
drobo 5n2 firmwareIncorrect access control in the /mysql/api/droboapp/data endpoint in Drobo 5N2 NAS version 4.0.5...CVE-2018-147039.8 CriticalDecember 3, 2018
drobo 5n2 firmwareIncorrect access control in the /drobopix/api/drobo.php endpoint in Drobo 5N2 NAS version 4.0.5...CVE-2018-147027.5 HighDecember 3, 2018
drobo 5n2 firmwareSystem command injection in the /DroboAccess/delete_user endpoint in Drobo 5N2 NAS version 4.0.5...CVE-2018-14701EPSS 20.0%9.8 CriticalDecember 3, 2018
drobo 5n2 firmwareIncorrect access control in the /mysql/api/logfile.php endpoint in Drobo 5N2 NAS version 4.0.5-13...CVE-2018-147007.5 HighDecember 3, 2018
drobo 5n2 firmwareSystem command injection in the /DroboAccess/enable_user endpoint in Drobo 5N2 NAS version 4.0.5...CVE-2018-14699Public exploitEPSS 29.4%9.8 CriticalDecember 3, 2018
drobo 5n2 firmwareCross-site scripting in the /DroboAccess/delete_user endpoint in Drobo 5N2 NAS version 4.0.5-13...CVE-2018-146986.1 MediumDecember 3, 2018
drobo 5n2 firmwareCross-site scripting in the /DroboAccess/enable_user endpoint in Drobo 5N2 NAS version 4.0.5-13...CVE-2018-146976.1 MediumDecember 3, 2018
drobo 5n2 firmwareIncorrect access control in the /mysql/api/drobo.php endpoint in Drobo 5N2 NAS version 4.0.5-13...CVE-2018-146967.5 HighDecember 3, 2018
drobo 5n2 firmwareIncorrect access control in the /mysql/api/diags.php endpoint in Drobo 5N2 NAS version 4.0.5-13...CVE-2018-146957.5 HighDecember 3, 2018