CVE-2015-2875: Path Traversal
First published: Thu Dec 31 2015(Updated: )
Absolute path traversal vulnerability on Seagate GoFlex Satellite, Seagate Wireless Mobile Storage, Seagate Wireless Plus Mobile Storage, and LaCie FUEL devices with firmware before 3.4.1.105 allows remote attackers to read arbitrary files via a full pathname in a download request during a Wi-Fi session.
Credit: cret@cert.org
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Seagate GoFlex Satellite | ||
| Seagate Wireless Plus Mobile Storage | ||
| Seagate Wireless Mobile Storage | ||
| Lacie Lac9000436u Firmware | ||
| Lacie Lac9000464u Firmware | ||
| LaCie LaC9000436U | <=2.3.0.014 | |
| Lacie Lac9000464u | <=2.3.0.014 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
Frequently Asked Questions
What is the severity of CVE-2015-2875?
CVE-2015-2875 is classified as a high severity vulnerability due to its potential for remote exploitation.
How do I fix CVE-2015-2875?
To fix CVE-2015-2875, update the firmware of affected Seagate and LaCie devices to version 3.4.1.105 or later.
Which devices are affected by CVE-2015-2875?
CVE-2015-2875 affects Seagate GoFlex Satellite, Seagate Wireless Mobile Storage, and Seagate Wireless Plus Mobile Storage devices.
What type of vulnerability is CVE-2015-2875?
CVE-2015-2875 is an absolute path traversal vulnerability allowing unauthorized access to files.
Can CVE-2015-2875 be exploited remotely?
Yes, CVE-2015-2875 can be exploited remotely through a crafted download request during a Wi-Fi session.
- agent/type
- collector/mitre-cve
- source/MITRE
- agent/last-modified-date
- agent/severity
- agent/references
- agent/author
- agent/first-publish-date
- agent/description
- agent/event
- agent/source
- agent/weakness
- agent/softwarecombine
- agent/tags
- collector/nvd-index
- agent/software-canonical-lookup-request
- vendor/seagate
- canonical/seagate goflex satellite
- canonical/seagate wireless plus mobile storage
- canonical/seagate wireless mobile storage
- vendor/lacie
- canonical/lacie lac9000436u firmware
- canonical/lacie lac9000464u firmware
- canonical/lacie lac9000436u
- version/lacie lac9000436u/2.3.0.014
- canonical/lacie lac9000464u
- version/lacie lac9000464u/2.3.0.014