medium5.3
CVE-2019-6178
An information leakage vulnerability in Iomega and LenovoEMC NAS products could allow disclosure of some device details such as Share names through the device …
Impact
An information leakage vulnerability in Iomega and LenovoEMC NAS products could allow disclosure of some device details such as Share names through the device API when Personal Cloud is enabled. This does not allow read, write, delete, or any other access to the underlying file systems and their contents.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Lenovo | Px12-350r Firmware | Version 4.0.24.34808 |
| Lenovo | Ix12-300r Firmware | Version 4.0.24.34808 |
| Lenovo | Home Media Network Hard Drive Firmware | Version 3.2.16.30221 |
| Lenovo | Storecenter Ix2-200 Firmware | Versions 3.2.16.30221, 2.1.50.30227 |
| Lenovo | Storecenter Ix4-200d Firmware | Versions 3.2.16.30221, 2.1.50.30227 |
| Lenovo | Storecenter Ix4-200rl Firmware | Version 2.1.50.30227 |