← Vulnerability feed

Vulnerability record · CVE-2018-14706 · published 3 December 2018

CVE-2018-14706: Drobo 5n2 firmware os command injection vulnerability

Drobo · 5n2 Firmware

System command injection in the /DroboPix/api/drobopix/demo endpoint on Drobo 5N2 NAS version 4.0.5-13.28.96115 allows unauthenticated attackers to execute system commands via the payload in a POST request.

9.8 CVSS 3.0 Critical EPSS 17% · top 3.0% CWE-78 · OS command injection
9.8CVSS 3.0 base score, v2 10.0
17%EPSS exploitation probability, 30 days
NoNot in CISA KEV
1Affected product versions listed by NVD
2References, 2 tagged exploit
17 Jun 2026Last modified by NVD

Description

System command injection in the /DroboPix/api/drobopix/demo endpoint on Drobo 5N2 NAS version 4.0.5-13.28.96115 allows unauthenticated attackers to execute system commands via the payload in a POST request.

CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Affected products

1 vulnerable configurations from NVD's CPE data, grouped by vendor and product.

References

LinkTags
https://blog.securityevaluators.com/call-me-a-doctor-new-vulnerabilities-in-drobo5n2-4f1d885df7fc ExploitThird Party Advisory
https://blog.securityevaluators.com/call-me-a-doctor-new-vulnerabilities-in-drobo5n2-4f1d885df7fc ExploitThird Party Advisory

Track CVE-2018-14706 inside VULONE

Watch it alongside the ransomware crews, C2 infrastructure and forum chatter that reference it, query it through the API and pull it into your SIEM over TAXII.

Start free Open in platform

Related vulnerabilities

Same products first, then exploited flaws of the same weakness class.

9.8CVE-2018-14705Drobo 5n2 firmware improper authentication vulnerabilityIn Drobo 5N2 4.0.5, all optional applications lack any form of authentication/authorization validation. As a result, any user capable of accessing th…EPSS 1.9%9.8CVE-2018-14699Drobo 5n2 firmware os command injection vulnerabilitySystem command injection in the /DroboAccess/enable_user endpoint in Drobo 5N2 NAS version 4.0.5-13.28.96115 allows unauthenticated attackers to exec…EPSS 29%9.8CVE-2018-14701Drobo 5n2 firmware os command injection vulnerabilitySystem command injection in the /DroboAccess/delete_user endpoint in Drobo 5N2 NAS version 4.0.5-13.28.96115 allows unauthenticated attackers to exec…EPSS 20%9.8CVE-2018-14703Drobo 5n2 firmware incorrect permission assignment vulnerabilityIncorrect access control in the /mysql/api/droboapp/data endpoint in Drobo 5N2 NAS version 4.0.5-13.28.96115 allows unauthenticated attackers to retr…EPSS 1.3%9.8CVE-2018-14708Drobo 5n2 firmware improper authentication vulnerabilityAn insecure transport protocol used by Drobo Dashboard API on Drobo 5N2 NAS version 4.0.5-13.28.96115 allows attackers to intercept network traffic.EPSS 1.3%9.8CVE-2018-14709Drobo 5n2 firmware improper authentication vulnerabilityIncorrect access control in the Dashboard API on Drobo 5N2 NAS version 4.0.5-13.28.96115 allows attackers to bypass authentication due to insecure to…EPSS 1.9%7.5CVE-2018-14695Drobo 5n2 firmware information exposure vulnerabilityIncorrect access control in the /mysql/api/diags.php endpoint in Drobo 5N2 NAS version 4.0.5-13.28.96115 allows unauthenticated attackers to retrieve…EPSS 1.3%7.5CVE-2018-14696Drobo 5n2 firmware information exposure vulnerabilityIncorrect access control in the /mysql/api/drobo.php endpoint in Drobo 5N2 NAS version 4.0.5-13.28.96115 allows unauthenticated attackers to retrieve…EPSS 1.3%

Source: NIST National Vulnerability Database (record CVE-2018-14706), CISA KEV, FIRST EPSS (scores of 2026-09-26). This page is refreshed as NVD updates the record.