high8.8
CVE-2019-6160
A vulnerability in various versions of Iomega and LenovoEMC NAS products could allow an unauthenticated user to access files on NAS shares via the API.
Impact
A vulnerability in various versions of Iomega and LenovoEMC NAS products could allow an unauthenticated user to access files on NAS shares via the API.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Lenovo | Px12-350r Firmware | before 4.0.24.34808 |
| Lenovo | Ix12-300r Firmware | before 4.0.24.34808 |
| Lenovo | Home Media Network Hard Drive Firmware | before 3.2.16.30221 |
| Lenovo | Storcenter Ix2-200 Firmware | before 3.2.16.30221 before 2.1.50.30227 |
| Lenovo | Storcenter Ix4-200d Firmware | before 3.2.16.30221 before 2.1.50.30227 |
| Lenovo | Storcenter Ix4-200rl Firmware | before 2.1.50.30227 |