CVE-2015-2875
High
Description
Absolute path traversal vulnerability on Seagate GoFlex Satellite, Seagate Wireless Mobile Storage, Seagate Wireless Plus Mobile Storage, and LaCie FUEL devices with firmware before 3.4.1.105 allows remote attackers to read arbitrary files via a full pathname in a download request during a Wi-Fi session.
SeverityHigh
CVSS7.5
Exploit probability—
ProductSeagate Goflex Sattelite
PublishedDec 31, 2015
First seenDec 31, 2015
How to fix
Sources list no fixed version or patch link for this vulnerability.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| seagate goflex_sattelite | No range specified | — |
| seagate wireless_mobile_storage | No range specified | — |
| seagate wireless_plus_mobile_storage | No range specified | — |
| lacie lac9000436u_firmware | v ≤ 2.3.0.014 | — |
| lacie lac9000464u_firmware | v ≤ 2.3.0.014 | — |
Check your version
Choose the product and enter the version you run to see whether it falls in the affected range.
In the Intelligence 360 plan
Attack Surface Management
See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.