CVEvulnerability
CVE-2015-2875
7.5 HIGH
Official page ↗
- Status
- Modified
- Published
- 2015-12-31
- Last modified
- 2026-06-17
- Assigner
- [email protected]
- CVSS 3.0 ([email protected])
- 7.5 HIGH — CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
- CVSS 2.0 ([email protected])
- 7.8 HIGH — AV:N/AC:L/Au:N/C:C/I:N/A:N
- Weaknesses
- CWE-22
Description
Absolute path traversal vulnerability on Seagate GoFlex Satellite, Seagate Wireless Mobile Storage, Seagate Wireless Plus Mobile Storage, and LaCie FUEL devices with firmware before 3.4.1.105 allows remote attackers to read arbitrary files via a full pathname in a download request during a Wi-Fi session.
Affected configurations
• seagate goflex sattelite
• seagate wireless mobile storage
• seagate wireless plus mobile storage
• lacie lac9000436u firmware (<= 2.3.0.014)
• lacie lac9000464u firmware (<= 2.3.0.014)
Related
Weakness · CWE (1)
- CWE-22 Improper Limitation of a Pathname to a Restricted Directory weakness
References
- https://www.kb.cert.org/vuls/id/903500 Third Party Advisory, US Government Resource
- https://www.kb.cert.org/vuls/id/GWAN-9ZGTUH Third Party Advisory, US Government Resource
- https://www.kb.cert.org/vuls/id/GWAN-A26L3F Third Party Advisory, US Government Resource
- https://www.kb.cert.org/vuls/id/903500 Third Party Advisory, US Government Resource
- https://www.kb.cert.org/vuls/id/GWAN-9ZGTUH Third Party Advisory, US Government Resource
- https://www.kb.cert.org/vuls/id/GWAN-A26L3F Third Party Advisory, US Government Resource