CVE-2015-2876 Unrestricted file upload vulnerability on Seagate GoFlex Satellite, Seagate Wireless Mobile Storage, Seagate Wireless Plus Mobile Storage, and LaCie FUEL devices with firmware before 3.4.1.105 allows....
HighCVSS 8.8
EPSS 2.8%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Unrestricted file upload vulnerability on Seagate GoFlex Satellite, Seagate Wireless Mobile Storage, Seagate Wireless Plus Mobile Storage, and LaCie FUEL devices with firmware before 3.4.1.105 allows remote attackers to execute arbitrary code by uploading a file to /media/sda2 during a Wi-Fi session.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| lacie lac9000436u firmware | <= 2.3.0.014 | No fix listed |
| lacie lac9000464u firmware | <= 2.3.0.014 | No fix listed |
| seagate wireless mobile storage | All versions | No fix listed |
| seagate wireless plus mobile storage | All versions | No fix listed |
| seagate goflex sattelite | All versions | No fix listed |
References
- VU#903500 third-party-advisory us-government-resource
- www.kb.cert.org third-party-advisory us-government-resource
- www.kb.cert.org third-party-advisory us-government-resource