CVE-2018-12296: Seagate NAS OS

High severity, CVSS 7.5. EPSS: 11.3% chance of exploitation in the next 30 days.

Insufficient access control in /api/external/7.0/system.System.get_infos in Seagate NAS OS version 4.3.15.1 allows attackers to obtain information about the NAS without authentication via empty POST requests.

Affected products

• Seagate NAS OS: version 4.3.15.1 only

Published 2019-05-13. Last modified 2026-06-17.