CVE-2015-2874

CRITICAL · 9.8 CVSS Gepubliceerd: 31-12-2015 CWE-255

Beschrijving

Seagate GoFlex Satellite, Seagate Wireless Mobile Storage, Seagate Wireless Plus Mobile Storage, and LaCie FUEL devices with firmware before 3.4.1.105 have a default password of root for the root account, which allows remote attackers to obtain administrative access via a TELNET session.

Vendors

Seagate Lacie

Affected products

Wireless Mobile Storage Wireless Plus Mobile Storage Lac9000436u Lac9000464u Lac9000436u Firmware Lac9000464u Firmware Goflex Sattelite

References

www.kb.cert.org
www.kb.cert.org
www.kb.cert.org