5.3

CVE-2019-6178

An information leakage vulnerability in Iomega and LenovoEMC NAS products could allow disclosure of some device details such as Share names through the device API when Personal Cloud is enabled. This does not allow read, write, delete, or any other access to the underlying file systems and their contents.

Data is provided by the National Vulnerability Database (NVD)
Lenovo ≫ Px12-350r Firmware Version4.0.24.34808
   Lenovo ≫ Px12-350r Version-
Lenovo ≫ Ix12-300r Firmware Version4.0.24.34808
   Lenovo ≫ Ix12-300r Version-
Lenovo ≫ Home Media Network Hard Drive Firmware Version3.2.16.30221 SwEditioncloud
   Lenovo ≫ Home Media Network Hard Drive Version- SwEditioncloud
Lenovo ≫ Storecenter Ix2-200 Firmware Version3.2.16.30221 SwEditioncloud
   Lenovo ≫ Storecenter Ix2-200 Version- SwEditioncloud
Lenovo ≫ Storecenter Ix4-200d Firmware Version3.2.16.30221 SwEditioncloud
   Lenovo ≫ Storecenter Ix4-200d Version- SwEditioncloud
Lenovo ≫ Storecenter Ix2-200 Firmware Version2.1.50.30227
   Lenovo ≫ Storecenter Ix2-200 Version-
Lenovo ≫ Storecenter Ix4-200d Firmware Version2.1.50.30227
   Lenovo ≫ Storecenter Ix4-200d Version-
Lenovo ≫ Storecenter Ix4-200rl Firmware Version2.1.50.30227
   Lenovo ≫ Storecenter Ix4-200rl Version-
Zu dieser CVE wurde keine CISA KEV oder CERT.AT-Warnung gefunden.
EPSS Metriken
Type Source Score Percentile
EPSS FIRST.org 0.37% 0.556
CVSS Metriken
Source Base Score Exploit Score Impact Score Vector string
nvd@nist.gov 5.3 3.9 1.4
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
nvd@nist.gov 4.3 8.6 2.9
AV:N/AC:M/Au:N/C:P/I:N/A:N
psirt@lenovo.com 5.3 3.9 1.4
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N