CVE-2018-12301: Seagate NAS OS

High severity, CVSS 7.5. EPSS: 1.4% chance of exploitation in the next 30 days.

Unvalidated URL in Download Manager in Seagate NAS OS version 4.3.15.1 allows attackers to access the loopback interface via a Download URL of 127.0.0.1 or localhost.

Affected products

• Seagate NAS OS: version 4.3.15.1 only

Published 2019-05-13. Last modified 2026-06-17.