CVE-2015-2874

Critical

Published: 31/12/2015(UTC)Translated: 15/06/2026(UTC)NVD NIST

Summary

Seagate GoFlex Satellite, Seagate Wireless Mobile Storage, Seagate Wireless Plus Mobile Storage, and LaCie FUEL devices with firmware before version 3.4.1.105 have a default password of 'root' for the root account, allowing remote attackers to gain administrative access via a TELNET session.

Risk Assessment

The risk to the organization is the potential for remote control of the devices, which could lead to data loss or unauthorized access to systems.

Recommendation

It is recommended to update the firmware to version 3.4.1.105 or later and to change the default password for the root account to a stronger one.

Original NVD description (English source)

Seagate GoFlex Satellite, Seagate Wireless Mobile Storage, Seagate Wireless Plus Mobile Storage, and LaCie FUEL devices with firmware before 3.4.1.105 have a default password of root for the root account, which allows remote attackers to obtain administrative access via a TELNET session.