CVEvulnerability
CVE-2015-2876
8.8 HIGH
Official page ↗
- Status
- Modified
- Published
- 2015-12-31
- Last modified
- 2026-06-17
- Assigner
- [email protected]
- CVSS 3.0 ([email protected])
- 8.8 HIGH — CVSS:3.0/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
- CVSS 2.0 ([email protected])
- 8.3 HIGH — AV:A/AC:L/Au:N/C:C/I:C/A:C
Description
Unrestricted file upload vulnerability on Seagate GoFlex Satellite, Seagate Wireless Mobile Storage, Seagate Wireless Plus Mobile Storage, and LaCie FUEL devices with firmware before 3.4.1.105 allows remote attackers to execute arbitrary code by uploading a file to /media/sda2 during a Wi-Fi session.
Affected configurations
• lacie lac9000436u firmware (<= 2.3.0.014)
• lacie lac9000464u firmware (<= 2.3.0.014)
• seagate wireless mobile storage
• seagate wireless plus mobile storage
• seagate goflex sattelite
References
- https://www.kb.cert.org/vuls/id/903500 Third Party Advisory, US Government Resource
- https://www.kb.cert.org/vuls/id/GWAN-9ZGTUH Third Party Advisory, US Government Resource
- https://www.kb.cert.org/vuls/id/GWAN-A26L3F Third Party Advisory, US Government Resource
- https://www.kb.cert.org/vuls/id/903500 Third Party Advisory, US Government Resource
- https://www.kb.cert.org/vuls/id/GWAN-9ZGTUH Third Party Advisory, US Government Resource
- https://www.kb.cert.org/vuls/id/GWAN-A26L3F Third Party Advisory, US Government Resource