Cpe:2.3:a:drobo:droboaccess:2.1:*:*:*:*:*:*:*

An unauthenticated blind command injection vulnerability in the DroboAccess v2.1 enable_user function allows remote attackers to execute arbitrary shell commands via the username parameter.