CVE-2015-2876

Unrestricted file upload vulnerability on Seagate GoFlex Satellite, Seagate Wireless Mobile Storage, Seagate Wireless Plus Mobile Storage, and LaCie FUEL devices with firmware before 3.4.1.105 allows remote attackers to execute arbitrary code by uploading a file to /media/sda2 during a Wi-Fi session.

• https://www.kb.cert.org/vuls/id/903500Third Party Advisory, US Government Resource
• https://www.kb.cert.org/vuls/id/GWAN-9ZGTUHThird Party Advisory, US Government Resource
• https://www.kb.cert.org/vuls/id/GWAN-A26L3FThird Party Advisory, US Government Resource
• https://www.kb.cert.org/vuls/id/903500Third Party Advisory, US Government Resource
• https://www.kb.cert.org/vuls/id/GWAN-9ZGTUHThird Party Advisory, US Government Resource
• https://www.kb.cert.org/vuls/id/GWAN-A26L3FThird Party Advisory, US Government Resource

Published

Dec 31, 2015

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2015-2870Cross-site scripting (XSS) vulnerability on Chiyu BF-630, BF…
• CVE-2015-2871Chiyu BF-660C fingerprint access-control devices allow remot…
• CVE-2015-2872Multiple cross-site scripting (XSS) vulnerabilities in Trend…
• CVE-2015-2873Trend Micro Deep Discovery Inspector (DDI) on Deep Discovery…
• CVE-2015-2874Seagate GoFlex Satellite, Seagate Wireless Mobile Storage, S…
• CVE-2015-2875Absolute path traversal vulnerability on Seagate GoFlex Sate…
• CVE-2015-2877Kernel Samepage Merging (KSM) in the Linux kernel 2.6.32 thr…3.3
• CVE-2015-2878Multiple cross-site request forgery (CSRF) vulnerabilities i…
• CVE-2015-2880TRENDnet WiFi Baby Cam TV-IP743SIC has a password of admin f…
• CVE-2015-2881Gynoii has a password of guest for the backdoor guest accoun…
• CVE-2015-2882Philips In.Sight B120/37 has a password of b120root for the …
• CVE-2015-2883Philips In.Sight B120/37 has XSS, related to the Weaved clou…