CVE-2015-2874

Seagate GoFlex Satellite, Seagate Wireless Mobile Storage, Seagate Wireless Plus Mobile Storage, and LaCie FUEL devices with firmware before 3.4.1.105 have a default password of root for the root account, which allows remote attackers to obtain administrative access via a TELNET session.

• CWE-255

• https://www.kb.cert.org/vuls/id/903500Third Party Advisory, US Government Resource
• https://www.kb.cert.org/vuls/id/GWAN-9ZGTUHThird Party Advisory, US Government Resource
• https://www.kb.cert.org/vuls/id/GWAN-A26L3FThird Party Advisory, US Government Resource
• https://www.kb.cert.org/vuls/id/903500Third Party Advisory, US Government Resource
• https://www.kb.cert.org/vuls/id/GWAN-9ZGTUHThird Party Advisory, US Government Resource
• https://www.kb.cert.org/vuls/id/GWAN-A26L3FThird Party Advisory, US Government Resource

Published

Dec 31, 2015

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2015-2868An exploitable remote code execution vulnerability exists in…
• CVE-2015-2869The FileInfo plugin before 2.22 for Ghisler Total Commander …
• CVE-2015-2870Cross-site scripting (XSS) vulnerability on Chiyu BF-630, BF…
• CVE-2015-2871Chiyu BF-660C fingerprint access-control devices allow remot…
• CVE-2015-2872Multiple cross-site scripting (XSS) vulnerabilities in Trend…
• CVE-2015-2873Trend Micro Deep Discovery Inspector (DDI) on Deep Discovery…
• CVE-2015-2875Absolute path traversal vulnerability on Seagate GoFlex Sate…
• CVE-2015-2876Unrestricted file upload vulnerability on Seagate GoFlex Sat…
• CVE-2015-2877Kernel Samepage Merging (KSM) in the Linux kernel 2.6.32 thr…3.3
• CVE-2015-2878Multiple cross-site request forgery (CSRF) vulnerabilities i…
• CVE-2015-2880TRENDnet WiFi Baby Cam TV-IP743SIC has a password of admin f…
• CVE-2015-2881Gynoii has a password of guest for the backdoor guest accoun…