CVE-2015-2875

Absolute path traversal vulnerability on Seagate GoFlex Satellite, Seagate Wireless Mobile Storage, Seagate Wireless Plus Mobile Storage, and LaCie FUEL devices with firmware before 3.4.1.105 allows remote attackers to read arbitrary files via a full pathname in a download request during a Wi-Fi session.

• CWE-22

• https://www.kb.cert.org/vuls/id/903500Third Party Advisory, US Government Resource
• https://www.kb.cert.org/vuls/id/GWAN-9ZGTUHThird Party Advisory, US Government Resource
• https://www.kb.cert.org/vuls/id/GWAN-A26L3FThird Party Advisory, US Government Resource
• https://www.kb.cert.org/vuls/id/903500Third Party Advisory, US Government Resource
• https://www.kb.cert.org/vuls/id/GWAN-9ZGTUHThird Party Advisory, US Government Resource
• https://www.kb.cert.org/vuls/id/GWAN-A26L3FThird Party Advisory, US Government Resource

Published

Dec 31, 2015

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2015-2869The FileInfo plugin before 2.22 for Ghisler Total Commander …
• CVE-2015-2870Cross-site scripting (XSS) vulnerability on Chiyu BF-630, BF…
• CVE-2015-2871Chiyu BF-660C fingerprint access-control devices allow remot…
• CVE-2015-2872Multiple cross-site scripting (XSS) vulnerabilities in Trend…
• CVE-2015-2873Trend Micro Deep Discovery Inspector (DDI) on Deep Discovery…
• CVE-2015-2874Seagate GoFlex Satellite, Seagate Wireless Mobile Storage, S…
• CVE-2015-2876Unrestricted file upload vulnerability on Seagate GoFlex Sat…
• CVE-2015-2877Kernel Samepage Merging (KSM) in the Linux kernel 2.6.32 thr…3.3
• CVE-2015-2878Multiple cross-site request forgery (CSRF) vulnerabilities i…
• CVE-2015-2880TRENDnet WiFi Baby Cam TV-IP743SIC has a password of admin f…
• CVE-2015-2881Gynoii has a password of guest for the backdoor guest accoun…
• CVE-2015-2882Philips In.Sight B120/37 has a password of b120root for the …