CVE-2015-2876
High
Description
Unrestricted file upload vulnerability on Seagate GoFlex Satellite, Seagate Wireless Mobile Storage, Seagate Wireless Plus Mobile Storage, and LaCie FUEL devices with firmware before 3.4.1.105 allows remote attackers to execute arbitrary code by uploading a file to /media/sda2 during a Wi-Fi session.
SeverityHigh
CVSS8.8
Exploit probability—
ProductSeagate Wireless Mobile Storage
PublishedDec 31, 2015
First seenDec 31, 2015
How to fix
Sources list no fixed version or patch link for this vulnerability.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| seagate wireless_mobile_storage | No range specified | — |
| lacie lac9000436u_firmware | v ≤ 2.3.0.014 | — |
| lacie lac9000464u_firmware | v ≤ 2.3.0.014 | — |
| seagate wireless_plus_mobile_storage | No range specified | — |
| seagate goflex_sattelite | No range specified | — |
Check your version
Choose the product and enter the version you run to see whether it falls in the affected range.
In the Intelligence 360 plan
Attack Surface Management
See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.