Seagate closes up careless flaws in its wireless hard drives

Seagate Wireless Plus

Security researchers have found several flaws in Seagate's revolutionary wireless hard drives that open the doors to hackers.

First reported by The Register, the range of wireless hard drives contain as many as three flaws that allow anyone with access to your network to use a simple username and password combo to download all the information and replace it with malware.

The wireless hard disk, which packs a hard drive and Wi-Fi controller into one package and allows a wide range of devices to access the data, includes an 'undocumented Telnet service' that can be accessed by simply chancing your arm with 'root' as the username and password. Once inside attackers have unrestricted file download capabilities and can do anything from stealing all your files and wiping your hard drive clean to replacing every file with malware versions that could wreak havoc on any device that connects to the drive.

How to fix it

Seagate has acted fast to address the problems by releasing new firmware, version 3.4.1.105, and it confirmed that this addresses all vulnerabilities. The drives affected include the Seagate Wireless Plus Mobile Storage, Seagate Wireless Mobile Storage and LaCie FUEL.

As well as downloading the new firmware, Seagate has told owners of the wireless hard drives to check the Seagate Download Finder on a regular basis to find out whether new firmware is available.

TOPICS
Latest in Pro
cybersecurity
What's the right type of web hosting for me?
Security padlock and circuit board to protect data
Trust in digital services around the world sees a massive drop as security worries continue
Hacker silhouette working on a laptop with North Korean flag on the background
North Korea unveils new military unit targeting AI attacks
An image of network security icons for a network encircling a digital blue earth.
US government warns agencies to make sure their backups are safe from NAKIVO security issue
Laptop computer displaying logo of WordPress, a free and open-source content management system (CMS)
This top WordPress plugin could be hiding a worrying security flaw, so be on your guard
construction
Building in the digital age: why construction’s future depends on scaling jobsite intelligence
Latest in News
L-mount alliance
Sirui joins L-Mount Alliance to deliver its superb budget lenses for Leica, DJI, Sigma and Panasonic cameras
Security padlock and circuit board to protect data
Trust in digital services around the world sees a massive drop as security worries continue
Samuel and Romy standing very close together in A24's Babygirl movie
Everything new on Max in April 2025, including A24's Babygirl and The Last of Us season 2
An AMD Radeon RX 9070 XT made by Sapphire on a table with its retail packaging
AMD’s secret weapon against Nvidia seems to be stock – way more RX 9070 GPUs are rumored to be hitting shelves than RTX 5000 models
Hacker silhouette working on a laptop with North Korean flag on the background
North Korea unveils new military unit targeting AI attacks
Seth Milchick and Kier Eagan's animatronic speaking in Severance season 2 episode 10
Apple TV+ announces Severance has been renewed for season 3 after that devastating finale