Skip to main content

Ix12 300R Firmware

2 CVEs product

Monthly

CVE-2019-6178 Aug 19, 16:15 MEDIUM This Month

An information leakage vulnerability in Iomega and LenovoEMC NAS products could allow disclosure of some device details such as Share names through the device API when Personal Cloud is enabled. Rated medium severity (CVSS 5.3), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.

Information Disclosure Lenovo Px12 350R Firmware Ix12 300R Firmware Home Media Network Hard Drive Firmware +3
NVD
CVSS 3.1
5.3
EPSS
1.1%
CVE-2019-6160 Jul 16, 19:15 HIGH PATCH This Week

A vulnerability in various versions of Iomega and LenovoEMC NAS products could allow an unauthenticated user to access files on NAS shares via the API. Rated high severity (CVSS 7.5), this vulnerability is remotely exploitable, no authentication required, low attack complexity.

Information Disclosure Lenovo Px12 350R Firmware Ix12 300R Firmware Home Media Network Hard Drive Firmware +3
NVD
CVSS 3.0
7.5
EPSS
1.4%
EPSS 1% CVSS 5.3
MEDIUM This Month

An information leakage vulnerability in Iomega and LenovoEMC NAS products could allow disclosure of some device details such as Share names through the device API when Personal Cloud is enabled. Rated medium severity (CVSS 5.3), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.

Information Disclosure Lenovo Px12 350R Firmware +5
NVD
EPSS 1% CVSS 7.5
HIGH PATCH This Week

A vulnerability in various versions of Iomega and LenovoEMC NAS products could allow an unauthenticated user to access files on NAS shares via the API. Rated high severity (CVSS 7.5), this vulnerability is remotely exploitable, no authentication required, low attack complexity.

Information Disclosure Lenovo Px12 350R Firmware +5
NVD

This site uses cookies essential for authentication and security. No tracking or analytics cookies are used. Privacy Policy