CVE-2019-6160
Published Jul 16, 2019
Last updated 4 years ago
Overview
- Description
- A vulnerability in various versions of Iomega and LenovoEMC NAS products could allow an unauthenticated user to access files on NAS shares via the API.
- Source
- psirt@lenovo.com
- NVD status
- Modified
Risk scores
CVSS 3.0
- Type
- Primary
- Base score
- 7.5
- Impact score
- 3.6
- Exploitability score
- 3.9
- Vector string
- CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
- Severity
- HIGH
CVSS 2.0
- Type
- Primary
- Base score
- 5
- Impact score
- 2.9
- Exploitability score
- 10
- Vector string
- AV:N/AC:L/Au:N/C:P/I:N/A:N
Weaknesses
- nvd@nist.gov
- NVD-CWE-noinfo
Social media
- Hype score
- Not currently trending
Configurations
[
{
"nodes": [
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:o:lenovo:px12-350r_firmware:*:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "61214E32-2C84-4AEE-8E7D-9C8D5C338F92",
"versionEndExcluding": "4.0.24.34808"
}
],
"operator": "OR"
},
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:h:lenovo:px12-350r:-:*:*:*:*:*:*:*",
"vulnerable": false,
"matchCriteriaId": "ACA01452-5C7E-4D17-B0EA-1452BD8E9D3D"
}
],
"operator": "OR"
}
],
"operator": "AND"
},
{
"nodes": [
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:o:lenovo:ix12-300r_firmware:*:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "8EF2CD56-1F60-4E73-84D8-3130ADF35917",
"versionEndExcluding": "4.0.24.34808"
}
],
"operator": "OR"
},
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:h:lenovo:ix12-300r:-:*:*:*:*:*:*:*",
"vulnerable": false,
"matchCriteriaId": "7DEEAB5E-4F49-4315-B331-E96D3C36BF7D"
}
],
"operator": "OR"
}
],
"operator": "AND"
},
{
"nodes": [
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:o:lenovo:home_media_network_hard_drive_firmware:*:*:*:*:cloud:*:*:*",
"vulnerable": true,
"matchCriteriaId": "CE01E59B-BB43-467A-A983-FCB2B485FD91",
"versionEndExcluding": "3.2.16.30221"
}
],
"operator": "OR"
},
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:h:lenovo:home_media_network_hard_drive:-:*:*:*:*:*:*:*",
"vulnerable": false,
"matchCriteriaId": "B79E103A-705F-4BAA-98DC-290302CB298E"
}
],
"operator": "OR"
}
],
"operator": "AND"
},
{
"nodes": [
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:o:lenovo:storcenter_ix2-200_firmware:*:*:*:*:cloud:*:*:*",
"vulnerable": true,
"matchCriteriaId": "E68008D9-E672-44E6-9110-A1084A297CC7",
"versionEndExcluding": "3.2.16.30221"
}
],
"operator": "OR"
},
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:h:lenovo:storcenter_ix2-200:-:*:*:*:*:*:*:*",
"vulnerable": false,
"matchCriteriaId": "ECC671AA-4C30-47DE-8BE4-986F480356C1"
}
],
"operator": "OR"
}
],
"operator": "AND"
},
{
"nodes": [
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:o:lenovo:storcenter_ix4-200d_firmware:*:*:*:*:cloud:*:*:*",
"vulnerable": true,
"matchCriteriaId": "8355B16F-A04F-4AB0-A3AF-1108D7D81D7C",
"versionEndExcluding": "3.2.16.30221"
}
],
"operator": "OR"
},
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:h:lenovo:storcenter_ix4-200d:-:*:*:*:*:*:*:*",
"vulnerable": false,
"matchCriteriaId": "22351E6B-AED2-43CA-A91B-A9C530A465AE"
}
],
"operator": "OR"
}
],
"operator": "AND"
},
{
"nodes": [
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:o:lenovo:storcenter_ix2-200_firmware:*:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "0B6C230F-BB67-4721-AF47-B25FC2DF9099",
"versionEndExcluding": "2.1.50.30227"
}
],
"operator": "OR"
},
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:h:lenovo:storcenter_ix-200:-:*:*:*:*:*:*:*",
"vulnerable": false,
"matchCriteriaId": "49029F54-9D53-4B48-BBD1-156F586BBDBB"
}
],
"operator": "OR"
}
],
"operator": "AND"
},
{
"nodes": [
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:o:lenovo:storcenter_ix4-200d_firmware:*:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "C086F80D-C629-49E7-A8B7-581CE3BD3C43",
"versionEndExcluding": "2.1.50.30227"
}
],
"operator": "OR"
},
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:h:lenovo:storcenter_ix4-200d:-:*:*:*:*:*:*:*",
"vulnerable": false,
"matchCriteriaId": "22351E6B-AED2-43CA-A91B-A9C530A465AE"
}
],
"operator": "OR"
}
],
"operator": "AND"
},
{
"nodes": [
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:o:lenovo:storcenter_ix4-200rl_firmware:*:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "0B35540D-43A2-42DA-BF5A-38A32A3F07E2",
"versionEndExcluding": "2.1.50.30227"
}
],
"operator": "OR"
},
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:h:lenovo:storcenter_ix4-200rl:-:*:*:*:*:*:*:*",
"vulnerable": false,
"matchCriteriaId": "02B4B193-E037-4DCB-94F1-0F7A2D7F290B"
}
],
"operator": "OR"
}
],
"operator": "AND"
}
]