.. / CVE-2018-12296

• Info Disclosure
• Nuclei
• Web

Exploit for Seagate NAS OS 4.3.15.1 - Server Information Disclosure (CVE-2018-12296)

Description:

Seagate NAS OS version 4.3.15.1 has insufficient access control which allows attackers to obtain information about the NAS without authentication via empty POST requests in /api/external/7.0/system.System.get_infos.

Nuclei Template

View the template here CVE-2018-12296.yaml

Validate with Nuclei

echo "$URL" | nuclei -t ~/nuclei-templates/http/cves/2018/CVE-2018-12296.yaml

References: