CVE-2019-6160

A vulnerability in various versions of Iomega and LenovoEMC NAS products could allow an unauthenticated user to access files on NAS shares via the API

High · published July 16, 2019

CVSS v3.0
8.8
EPSS
1%
Percentile
71.9
In the wild
Unconfirmed
What it is

A vulnerability in various versions of Iomega and LenovoEMC NAS products could allow an unauthenticated user to access files on NAS shares via the API.

The record
Technical detail
CVSS v3.0
8.8 · HIGH
Vector
CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
CVSS v4.0
Not supplied
EPSS
0.01381 · 71.9th percentile
Published
2019-07-16T18:53Z
EPSS history
Timeline
  • 16 JUL 18:53Z
    A vulnerability in various versions of Iomega and LenovoEMC NAS products could allow an unauthenticated user to access files on NAS shares via the API
    cvelistv5