CVE-2018-9074

Iomega and LenovoEMC NAS Web UI Vulnerabilities

published September 28, 2018

CVSS
—
EPSS
1%
Percentile
61.5
In the wild
Unconfirmed
What it is

For some Iomega, Lenovo, LenovoEMC NAS devices versions 4.1.402.34662 and earlier, the file upload functionality of the Content Explorer application is vulnerable to path traversal. As a result, users can upload files anywhere on the device's operating system as the root user.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.00974 · 61.5th percentile
Published
2018-09-28T20:00Z
EPSS history
Timeline
  • 28 SEP 20:00Z
    Iomega and LenovoEMC NAS Web UI Vulnerabilities
    cvelistv5