CVE-2015-2874 Seagate GoFlex Satellite, Seagate Wireless Mobile Storage, Seagate Wireless Plus Mobile Storage, and LaCie FUEL devices with firmware before 3.4.1.105 have a default password of root for the root acco...
CriticalCVSS 9.8
EPSS 4.2%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Seagate GoFlex Satellite, Seagate Wireless Mobile Storage, Seagate Wireless Plus Mobile Storage, and LaCie FUEL devices with firmware before 3.4.1.105 have a default password of root for the root account, which allows remote attackers to obtain administrative access via a TELNET session.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| seagate wireless mobile storage | All versions | No fix listed |
| seagate wireless plus mobile storage | All versions | No fix listed |
| lacie lac9000436u firmware | <= 2.3.0.014 | No fix listed |
| lacie lac9000464u firmware | <= 2.3.0.014 | No fix listed |
| seagate goflex sattelite | All versions | No fix listed |
References
- VU#903500 third-party-advisory us-government-resource
- www.kb.cert.org third-party-advisory us-government-resource
- www.kb.cert.org third-party-advisory us-government-resource