CVE-2015-2876 File upload in n/a
Remote attackers can execute arbitrary code by uploading malicious files to specific directories on Seagate wireless storage devices during Wi-Fi sessions.
- Exploited in the wild
- Not known
- Login needed
- Not needed
- Attackable
- Local or same network only
- Victim action needed
- Not needed
- Fix
- None listed
What is CVE-2015-2876?
CVE-2015-2876 is a high-severity vulnerability in n/a, published on 31 Dec 2015. It can only be exploited from the same machine or local network, with no action from the victim.
Official description
Unrestricted file upload vulnerability on Seagate GoFlex Satellite, Seagate Wireless Mobile Storage, Seagate Wireless Plus Mobile Storage, and LaCie FUEL devices with firmware before 3.4.1.105 allows remote attackers to execute arbitrary code by uploading a file to /media/sda2 during a Wi-Fi session.
Which versions are affected by CVE-2015-2876?
It affects 5 products.
Products include Lacie Lac9000436u Firmware, Lacie Lac9000464u Firmware, Seagate Goflex Sattelite, Seagate Wireless Mobile Storage, Seagate Wireless Plus Mobile Storage.
How do I fix CVE-2015-2876?
No fix has been published for CVE-2015-2876 yet. Limit exposure of the affected software until one is available.
Is CVE-2015-2876 being exploited?
There is no known exploitation of CVE-2015-2876 in the wild and no public exploit code.
Other vulnerabilities in n/a
Sources
Also known as GHSA-4427-hxx6-cmx7.