Vulnerability CVE-2015-2874
Published: 2015-12-31

Description:
Seagate GoFlex Satellite, Seagate Wireless Mobile Storage, Seagate Wireless Plus Mobile Storage, and LaCie FUEL devices with firmware before 3.4.1.105 have a default password of root for the root account, which allows remote attackers to obtain administrative access via a TELNET session.

See advisories in our WLB2 database:
Topic
Author
Date
High
Seagate GoFlex Satellite Remote Telnet Default Password
Matt Bergin
19.12.2015

CVSS2 => (AV:N/AC:L/Au:N/C:C/I:C/A:C)

CVSS Base Score
Impact Subscore
Exploitability Subscore
10/10
10/10
10/10
Exploit range
Attack complexity
Authentication
Remote
Low
No required
Confidentiality impact
Integrity impact
Availability impact
Complete
Complete
Complete
Affected software
Seagate -> Goflex sattelite 
Seagate -> Wireless mobile storage 
Seagate -> Wireless plus mobile storage 
Lacie -> Lac9000436u firmware 
Lacie -> Lac9000464u firmware 

 References:
https://www.kb.cert.org/vuls/id/GWAN-A26L3F
https://www.kb.cert.org/vuls/id/GWAN-9ZGTUH
https://www.kb.cert.org/vuls/id/903500
Copyright 2024, cxsecurity.com

 

Back to Top