Vulnerability Monitor

The vendors, products, and vulnerabilities you care about

CVE-2015-2874

Seagate GoFlex Satellite, Seagate Wireless Mobile Storage, Seagate Wireless Plus Mobile Storage, and LaCie FUEL devices with firmware before 3.4.1.105 have a default password of root for the root account, which allows remote attackers to obtain administrative access via a TELNET session.

Published

2015-12-31T05:59:02.673

Last Modified

2025-04-12T10:46:40.837

Status

Deferred

Source

[email protected]

Severity

CVSSv3.0: 9.8 (CRITICAL)

CVSSv2 Vector

AV:N/AC:L/Au:N/C:C/I:C/A:C

  • Access Vector: NETWORK
  • Access Complexity: LOW
  • Authentication: NONE
  • Confidentiality Impact: COMPLETE
  • Integrity Impact: COMPLETE
  • Availability Impact: COMPLETE
Exploitability Score

10.0

Impact Score

10.0

Weaknesses
  • Type: Primary
    CWE-255
Affected Vendors & Products
Type Vendor Product Version/Range Vulnerable?
Hardware seagate wireless_mobile_storage * Yes
Hardware seagate wireless_plus_mobile_storage * Yes
Hardware lacie lac9000436u * No
Hardware lacie lac9000464u * No
Operating System lacie lac9000436u_firmware ≤ 2.3.0.014 Yes
Operating System lacie lac9000464u_firmware ≤ 2.3.0.014 Yes
Hardware seagate goflex_sattelite * Yes
References