CVE-2015-2875 Absolute path traversal vulnerability on Seagate GoFlex Satellite, Seagate Wireless Mobile Storage, Seagate Wireless Plus Mobile Storage, and LaCie FUEL devices with firmware before 3.4.1.105 allows r...
HighCVSS 7.5
EPSS 3.2%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Absolute path traversal vulnerability on Seagate GoFlex Satellite, Seagate Wireless Mobile Storage, Seagate Wireless Plus Mobile Storage, and LaCie FUEL devices with firmware before 3.4.1.105 allows remote attackers to read arbitrary files via a full pathname in a download request during a Wi-Fi session.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| seagate goflex sattelite | All versions | No fix listed |
| seagate wireless mobile storage | All versions | No fix listed |
| seagate wireless plus mobile storage | All versions | No fix listed |
| lacie lac9000436u firmware | <= 2.3.0.014 | No fix listed |
| lacie lac9000464u firmware | <= 2.3.0.014 | No fix listed |
References
- VU#903500 third-party-advisory us-government-resource
- www.kb.cert.org third-party-advisory us-government-resource
- www.kb.cert.org third-party-advisory us-government-resource