Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
cve[email protected]CVE-2015-2875
HistoryDec 31, 2015 - 5:59 a.m.

CVE-2015-2875

2015-12-3105:59:03
CWE-22
[email protected]
web.nvd.nist.gov
23
cve-2015-2875
seagate
lacie
absolute path traversal
firmware vulnerability
remote attack
file read
wi-fi session

7.8 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

NONE

Availability Impact

NONE

AV:N/AC:L/Au:N/C:C/I:N/A:N

7.5 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

NONE

Availability Impact

NONE

CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

7.9 High

AI Score

Confidence

High

0.002 Low

EPSS

Percentile

64.6%

JSON

Absolute path traversal vulnerability on Seagate GoFlex Satellite, Seagate Wireless Mobile Storage, Seagate Wireless Plus Mobile Storage, and LaCie FUEL devices with firmware before 3.4.1.105 allows remote attackers to read arbitrary files via a full pathname in a download request during a Wi-Fi session.

Affected configurations

NVD
Node
seagategoflex_sattelite
Node
seagatewireless_mobile_storage
OR
seagatewireless_plus_mobile_storage
Node
lacielac9000436u
OR
lacielac9000464u
AND
lacielac9000436u_firmwareRange≤2.3.0.014
OR
lacielac9000464u_firmwareRange≤2.3.0.014

Related

nvd 1
prion 1
cvelist 1
cert 1
nvd
nvd
CVE-2015-2875
2015-12-31 05:59:03
prion
prion
Path traversal
2015-12-31 05:59:00
cvelist
cvelist
CVE-2015-2875
2015-12-31 02:00:00
cert
cert
Seagate and LaCie wireless storage products contain multiple vulnerabilities
2015-09-01 00:00:00

7.8 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

NONE

Availability Impact

NONE

AV:N/AC:L/Au:N/C:C/I:N/A:N

7.5 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

NONE

Availability Impact

NONE

CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

7.9 High

AI Score

Confidence

High

0.002 Low

EPSS

Percentile

64.6%

JSON
Related for CVE-2015-2875
nvd1prion1cvelist1cert1