Seagate Patches Vulnerabilities in Wireless Hard Drives

By Eduard Kovacs on September 03, 2015 Seagate has released firmware updates to address several vulnerabilities affecting the company’s wireless storage devices.

The flaws, reported by researchers at Virginia-based security solutions provider Tangible Security, can be exploited by remote, unauthenticated attackers to access arbitrary files on the hard drive and gain root access to the device. The issues affect Seagate Wireless Mobile Storage, Seagate Wireless Plus Mobile Storage, and LaCie FUEL, which are products designed for personal use.Seagate wireless storage.http://www.securityweek.com/sites/default/files/images/seagate_wireless_storage.png

The security holes have been confirmed to exist in versions 2.2.0.005 and 2.3.0.014 of the firmware (released in October 2014), but other versions may be impacted as well. Seagate patched the vulnerabilities with the release of version 3.4.1.105 of the firmware, CERT said in an advisory published this week. Full Article