VYPR
← All advisories
High severity7.5NVD Advisory· Published Dec 31, 2015· Updated Jun 17, 2026

CVE-2015-2875

CVE-2015-2875

Description

Absolute path traversal vulnerability on Seagate GoFlex Satellite, Seagate Wireless Mobile Storage, Seagate Wireless Plus Mobile Storage, and LaCie FUEL devices with firmware before 3.4.1.105 allows remote attackers to read arbitrary files via a full pathname in a download request during a Wi-Fi session.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

8
  • Seagate/Goflex Sattelite2 versions
    cpe:2.3:h:seagate:goflex_sattelite:*:*:*:*:*:*:*:*+ 1 more
    • cpe:2.3:h:seagate:goflex_sattelite:*:*:*:*:*:*:*:*
    • (no CPE)range: <3.4.1.105
  • Seagate/Wireless Mobile Storage2 versions
    cpe:2.3:h:seagate:wireless_mobile_storage:*:*:*:*:*:*:*:*+ 1 more
    • cpe:2.3:h:seagate:wireless_mobile_storage:*:*:*:*:*:*:*:*
    • (no CPE)range: <3.4.1.105
  • Seagate/Wireless Plus Mobile Storage
    cpe:2.3:h:seagate:wireless_plus_mobile_storage:*:*:*:*:*:*:*:*
  • Lacie/Lac9000464u Firmware2 versions
    cpe:2.3:o:lacie:lac9000436u_firmware:*:*:*:*:*:*:*:*+ 1 more
    • cpe:2.3:o:lacie:lac9000436u_firmware:*:*:*:*:*:*:*:*range: <=2.3.0.014
    • cpe:2.3:o:lacie:lac9000464u_firmware:*:*:*:*:*:*:*:*range: <=2.3.0.014
  • Lacie/FUELllm-fuzzy
    Range: <3.4.1.105

Patches

Vulnerability mechanics

References

3

News mentions

0

No linked articles in our index yet.