7.5

CVE-2019-6160

A vulnerability in various versions of Iomega and LenovoEMC NAS products could allow an unauthenticated user to access files on NAS shares via the API.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Lenovo ≫ Px12-350r Firmware Version < 4.0.24.34808
   Lenovo ≫ Px12-350r Version -
Lenovo ≫ Ix12-300r Firmware Version < 4.0.24.34808
   Lenovo ≫ Ix12-300r Version -
Lenovo ≫ Home Media Network Hard Drive Firmware SwEdition cloud Version < 3.2.16.30221
Lenovo ≫ Storcenter Ix2-200 Firmware SwEdition cloud Version < 3.2.16.30221
   Lenovo ≫ Storcenter Ix2-200 Version -
Lenovo ≫ Storcenter Ix4-200d Firmware SwEdition cloud Version < 3.2.16.30221
   Lenovo ≫ Storcenter Ix4-200d Version -
Lenovo ≫ Storcenter Ix2-200 Firmware Version < 2.1.50.30227
   Lenovo ≫ Storcenter Ix-200 Version -
Lenovo ≫ Storcenter Ix4-200d Firmware Version < 2.1.50.30227
   Lenovo ≫ Storcenter Ix4-200d Version -
Lenovo ≫ Storcenter Ix4-200rl Firmware Version < 2.1.50.30227
   Lenovo ≫ Storcenter Ix4-200rl Version -
Zu dieser CVE wurde keine Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 1.38% 0.686
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
NIST 7.5 3.9 3.6
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
NIST 5 10 2.9
AV:N/AC:L/Au:N/C:P/I:N/A:N
Lenovo 8.8 2.8 5.9
CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Es wurden noch keine Informationen zu CWE veröffentlicht.
https://support.lenovo.com/solutions/LEN-25557
Patch
Vendor Advisory