8.8

CVE-2019-6160

A vulnerability in various versions of Iomega and LenovoEMC NAS products could allow an unauthenticated user to access files on NAS shares via the API.

Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Lenovo ≫ Px12-350r Firmware Version < 4.0.24.34808
   Lenovo ≫ Px12-350r Version-
Lenovo ≫ Ix12-300r Firmware Version < 4.0.24.34808
   Lenovo ≫ Ix12-300r Version-
Lenovo ≫ Home Media Network Hard Drive Firmware SwEditioncloud Version < 3.2.16.30221
Lenovo ≫ Storcenter Ix2-200 Firmware SwEditioncloud Version < 3.2.16.30221
   Lenovo ≫ Storcenter Ix2-200 Version-
Lenovo ≫ Storcenter Ix4-200d Firmware SwEditioncloud Version < 3.2.16.30221
   Lenovo ≫ Storcenter Ix4-200d Version-
Lenovo ≫ Storcenter Ix2-200 Firmware Version < 2.1.50.30227
   Lenovo ≫ Storcenter Ix-200 Version-
Lenovo ≫ Storcenter Ix4-200d Firmware Version < 2.1.50.30227
   Lenovo ≫ Storcenter Ix4-200d Version-
Lenovo ≫ Storcenter Ix4-200rl Firmware Version < 2.1.50.30227
   Lenovo ≫ Storcenter Ix4-200rl Version-
Zu dieser CVE wurde keine CISA KEV oder CERT.AT-Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 0.49% 0.626
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
nvd@nist.gov 7.5 3.9 3.6
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
nvd@nist.gov 5 10 2.9
AV:N/AC:L/Au:N/C:P/I:N/A:N
psirt@lenovo.com 8.8 2.8 5.9
CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H