CVE-2018-9074 (GCVE-0-2018-9074)

Vulnerability from cvelistv5 – Published: 2018-09-28 20:00 – Updated: 2024-08-05 07:17
VLAI?
Title
Iomega and LenovoEMC NAS Web UI Vulnerabilities
Summary
For some Iomega, Lenovo, LenovoEMC NAS devices versions 4.1.402.34662 and earlier, the file upload functionality of the Content Explorer application is vulnerable to path traversal. As a result, users can upload files anywhere on the device's operating system as the root user.
Severity ?
No CVSS data available.
CWE
  • Path traversal
Assigner
References
Impacted products
Vendor Product Version
Lenovo Group LTD Iomega StorCenter Affected: 4.1.402.34662 , ≤ 4.1.402.34662 (custom)
Create a notification for this product.
    Lenovo Group LTD LenovoEMC Affected: 4.1.402.34662 , ≤ 4.1.402.34662 (custom)
Create a notification for this product.
    Lenovo Group LTD EZ Media and Backup Center Affected: 4.1.402.34662 , ≤ 4.1.402.34662 (custom)
Create a notification for this product.
Show details on NVD website
To clipboard 

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-05T07:17:50.355Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://support.lenovo.com/us/en/solutions/LEN-24224"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "Iomega StorCenter",
          "vendor": "Lenovo Group LTD",
          "versions": [
            {
              "lessThanOrEqual": "4.1.402.34662",
              "status": "affected",
              "version": "4.1.402.34662",
              "versionType": "custom"
            }
          ]
        },
        {
          "product": "LenovoEMC",
          "vendor": "Lenovo Group LTD",
          "versions": [
            {
              "lessThanOrEqual": "4.1.402.34662",
              "status": "affected",
              "version": "4.1.402.34662",
              "versionType": "custom"
            }
          ]
        },
        {
          "product": "EZ Media and Backup Center",
          "vendor": "Lenovo Group LTD",
          "versions": [
            {
              "lessThanOrEqual": "4.1.402.34662",
              "status": "affected",
              "version": "4.1.402.34662",
              "versionType": "custom"
            }
          ]
        }
      ],
      "datePublic": "2018-09-20T00:00:00",
      "descriptions": [
        {
          "lang": "en",
          "value": "For some Iomega, Lenovo, LenovoEMC NAS devices versions 4.1.402.34662 and earlier, the file upload functionality of the Content Explorer application is vulnerable to path traversal. As a result, users can upload files anywhere on the device\u0027s operating system as the root user."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "Path traversal",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2018-09-28T19:57:01",
        "orgId": "da227ddf-6e25-4b41-b023-0f976dcaca4b",
        "shortName": "lenovo"
      },
      "references": [
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://support.lenovo.com/us/en/solutions/LEN-24224"
        }
      ],
      "source": {
        "advisory": "https://support.lenovo.com/us/en/solutions/LEN-24224",
        "discovery": "UNKNOWN"
      },
      "title": "Iomega and LenovoEMC NAS Web UI Vulnerabilities",
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "psirt@lenovo.com",
          "ID": "CVE-2018-9074",
          "STATE": "PUBLIC",
          "TITLE": "Iomega and LenovoEMC NAS Web UI Vulnerabilities"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "Iomega StorCenter",
                      "version": {
                        "version_data": [
                          {
                            "affected": "\u003c=",
                            "version_affected": "\u003c=",
                            "version_name": "4.1.402.34662",
                            "version_value": "4.1.402.34662"
                          }
                        ]
                      }
                    },
                    {
                      "product_name": "LenovoEMC",
                      "version": {
                        "version_data": [
                          {
                            "affected": "\u003c=",
                            "version_affected": "\u003c=",
                            "version_name": "4.1.402.34662",
                            "version_value": "4.1.402.34662"
                          }
                        ]
                      }
                    },
                    {
                      "product_name": "EZ Media and Backup Center",
                      "version": {
                        "version_data": [
                          {
                            "affected": "\u003c=",
                            "version_affected": "\u003c=",
                            "version_name": "4.1.402.34662",
                            "version_value": "4.1.402.34662"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "Lenovo Group LTD"
              }
            ]
          }
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "For some Iomega, Lenovo, LenovoEMC NAS devices versions 4.1.402.34662 and earlier, the file upload functionality of the Content Explorer application is vulnerable to path traversal. As a result, users can upload files anywhere on the device\u0027s operating system as the root user."
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "Path traversal"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "https://support.lenovo.com/us/en/solutions/LEN-24224",
              "refsource": "CONFIRM",
              "url": "https://support.lenovo.com/us/en/solutions/LEN-24224"
            }
          ]
        },
        "source": {
          "advisory": "https://support.lenovo.com/us/en/solutions/LEN-24224",
          "discovery": "UNKNOWN"
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "da227ddf-6e25-4b41-b023-0f976dcaca4b",
    "assignerShortName": "lenovo",
    "cveId": "CVE-2018-9074",
    "datePublished": "2018-09-28T20:00:00",
    "dateReserved": "2018-03-27T00:00:00",
    "dateUpdated": "2024-08-05T07:17:50.355Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1",
  "vulnerability-lookup:meta": {
    "fkie_nvd": {
      "configurations": "[{\"operator\": \"AND\", \"nodes\": [{\"operator\": \"OR\", \"negate\": false, \"cpeMatch\": [{\"vulnerable\": true, \"criteria\": \"cpe:2.3:o:lenovo:lenovoemc_firmware:*:*:*:*:*:*:*:*\", \"versionEndIncluding\": \"4.1.402.34662\", \"matchCriteriaId\": \"807B7582-8A34-4497-A2D7-BEF260790FD1\"}]}, {\"operator\": \"OR\", \"negate\": false, \"cpeMatch\": [{\"vulnerable\": false, \"criteria\": \"cpe:2.3:h:lenovo:iomega_ez_media_\\\\\u0026_backup_center:-:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"76CDC771-1E75-4FA2-ACAD-6B76A3B41E87\"}, {\"vulnerable\": false, \"criteria\": \"cpe:2.3:h:lenovo:iomega_storcenter_ix2:-:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"2C6174F7-8D2C-4EA2-84B5-2F336C4921D3\"}, {\"vulnerable\": false, \"criteria\": \"cpe:2.3:h:lenovo:iomega_storcenter_ix2-dl:-:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"E19F81E4-64E2-42F3-8BF9-0E0B2C4B901B\"}, {\"vulnerable\": false, \"criteria\": \"cpe:2.3:h:lenovo:iomega_storcenter_ix4-300d:-:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"FDCCCF7E-0A84-44DC-A48B-577183A4BA7C\"}, {\"vulnerable\": false, \"criteria\": \"cpe:2.3:h:lenovo:iomega_storcenter_px12-400r:-:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"D840F199-8607-470E-9AE9-97459C041C11\"}, {\"vulnerable\": false, \"criteria\": \"cpe:2.3:h:lenovo:iomega_storcenter_px12-450r:-:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"0ED64A7B-B398-4A21-A93A-17C9CF9D6AC8\"}, {\"vulnerable\": false, \"criteria\": \"cpe:2.3:h:lenovo:iomega_storcenter_px2-300d:-:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"B10F7589-A7F5-4CA3-A959-0FC457EC605D\"}, {\"vulnerable\": false, \"criteria\": \"cpe:2.3:h:lenovo:iomega_storcenter_px4-300d:-:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"179EC0F5-606D-4DC2-898A-D243AB12680F\"}, {\"vulnerable\": false, \"criteria\": \"cpe:2.3:h:lenovo:iomega_storcenter_px4-300r:-:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"D74B9A44-814D-4415-BC82-0C3BE0E6FCF1\"}, {\"vulnerable\": false, \"criteria\": \"cpe:2.3:h:lenovo:iomega_storcenter_px6-300d:-:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"EF84CD08-A8D6-4C6E-9A4C-BC32981EF8C9\"}, {\"vulnerable\": false, \"criteria\": \"cpe:2.3:h:lenovo:lenovo_ez_media_\\\\\u0026_backup_center:-:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"9C52F618-C9B0-470B-96BB-3BFB01797D47\"}, {\"vulnerable\": false, \"criteria\": \"cpe:2.3:h:lenovo:lenovo_ix2:-:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"ED38E2D0-50BE-4D0F-AD79-BCC14FBF17E7\"}, {\"vulnerable\": false, \"criteria\": \"cpe:2.3:h:lenovo:lenovo_ix4-300d:-:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"39F19015-369E-41F4-A543-7B56C08194B3\"}, {\"vulnerable\": false, \"criteria\": \"cpe:2.3:h:lenovo:lenovoemc_px12-400r:-:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"6A437398-827A-4A22-AC7B-984BABEE328A\"}, {\"vulnerable\": false, \"criteria\": \"cpe:2.3:h:lenovo:lenovoemc_px12-450r:-:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"24C29B73-FC3B-4440-B75B-7454E8AE5403\"}, {\"vulnerable\": false, \"criteria\": \"cpe:2.3:h:lenovo:lenovoemc_px2-300d:-:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"AE20E31A-28B9-4186-B3D0-60619799E8B1\"}, {\"vulnerable\": false, \"criteria\": \"cpe:2.3:h:lenovo:lenovoemc_px4-300d:-:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"BA4AD8BC-4BCA-4850-8058-AE4B669A4C89\"}, {\"vulnerable\": false, \"criteria\": \"cpe:2.3:h:lenovo:lenovoemc_px4-300r:-:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"014B2DE3-3012-4821-8CC8-A90474C95DA7\"}, {\"vulnerable\": false, \"criteria\": \"cpe:2.3:h:lenovo:lenovoemc_px4-400d:-:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"DC2EB779-CFAA-45BB-8D4B-DD6CFB31A34A\"}, {\"vulnerable\": false, \"criteria\": \"cpe:2.3:h:lenovo:lenovoemc_px4-400r:-:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"1C208CA2-2928-43FC-8477-895738579855\"}, {\"vulnerable\": false, \"criteria\": \"cpe:2.3:h:lenovo:lenovoemc_px6-300d:-:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"0AD5BFDB-E0A0-4C36-8102-05D5F0DAA87D\"}]}]}]",
      "descriptions": "[{\"lang\": \"en\", \"value\": \"For some Iomega, Lenovo, LenovoEMC NAS devices versions 4.1.402.34662 and earlier, the file upload functionality of the Content Explorer application is vulnerable to path traversal. As a result, users can upload files anywhere on the device\u0027s operating system as the root user.\"}, {\"lang\": \"es\", \"value\": \"Para algunos dispositivos NAS Iomega, Lenovo y LenovoEMC en versiones 4.1.402.34662 y anteriores, la funcionalidad de subida de archivos de la aplicaci\\u00f3n Content Explorer es vulnerable a salto de directorio. Como resultado, los usuarios pueden subir archivos en cualquier parte del sistema operativo del dispositivo como usuario root.\"}]",
      "id": "CVE-2018-9074",
      "lastModified": "2024-11-21T04:14:55.240",
      "metrics": "{\"cvssMetricV30\": [{\"source\": \"nvd@nist.gov\", \"type\": \"Primary\", \"cvssData\": {\"version\": \"3.0\", \"vectorString\": \"CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N\", \"baseScore\": 6.5, \"baseSeverity\": \"MEDIUM\", \"attackVector\": \"NETWORK\", \"attackComplexity\": \"LOW\", \"privilegesRequired\": \"LOW\", \"userInteraction\": \"NONE\", \"scope\": \"UNCHANGED\", \"confidentialityImpact\": \"NONE\", \"integrityImpact\": \"HIGH\", \"availabilityImpact\": \"NONE\"}, \"exploitabilityScore\": 2.8, \"impactScore\": 3.6}], \"cvssMetricV2\": [{\"source\": \"nvd@nist.gov\", \"type\": \"Primary\", \"cvssData\": {\"version\": \"2.0\", \"vectorString\": \"AV:N/AC:L/Au:S/C:N/I:C/A:N\", \"baseScore\": 6.8, \"accessVector\": \"NETWORK\", \"accessComplexity\": \"LOW\", \"authentication\": \"SINGLE\", \"confidentialityImpact\": \"NONE\", \"integrityImpact\": \"COMPLETE\", \"availabilityImpact\": \"NONE\"}, \"baseSeverity\": \"MEDIUM\", \"exploitabilityScore\": 8.0, \"impactScore\": 6.9, \"acInsufInfo\": false, \"obtainAllPrivilege\": false, \"obtainUserPrivilege\": false, \"obtainOtherPrivilege\": false, \"userInteractionRequired\": false}]}",
      "published": "2018-09-28T20:29:00.643",
      "references": "[{\"url\": \"https://support.lenovo.com/us/en/solutions/LEN-24224\", \"source\": \"psirt@lenovo.com\", \"tags\": [\"Vendor Advisory\"]}, {\"url\": \"https://support.lenovo.com/us/en/solutions/LEN-24224\", \"source\": \"af854a3a-2127-422b-91ae-364da2661108\", \"tags\": [\"Vendor Advisory\"]}]",
      "sourceIdentifier": "psirt@lenovo.com",
      "vulnStatus": "Modified",
      "weaknesses": "[{\"source\": \"nvd@nist.gov\", \"type\": \"Primary\", \"description\": [{\"lang\": \"en\", \"value\": \"CWE-22\"}]}]"
    },
    "nvd": "{\"cve\":{\"id\":\"CVE-2018-9074\",\"sourceIdentifier\":\"psirt@lenovo.com\",\"published\":\"2018-09-28T20:29:00.643\",\"lastModified\":\"2024-11-21T04:14:55.240\",\"vulnStatus\":\"Modified\",\"cveTags\":[],\"descriptions\":[{\"lang\":\"en\",\"value\":\"For some Iomega, Lenovo, LenovoEMC NAS devices versions 4.1.402.34662 and earlier, the file upload functionality of the Content Explorer application is vulnerable to path traversal. As a result, users can upload files anywhere on the device\u0027s operating system as the root user.\"},{\"lang\":\"es\",\"value\":\"Para algunos dispositivos NAS Iomega, Lenovo y LenovoEMC en versiones 4.1.402.34662 y anteriores, la funcionalidad de subida de archivos de la aplicaci\u00f3n Content Explorer es vulnerable a salto de directorio. Como resultado, los usuarios pueden subir archivos en cualquier parte del sistema operativo del dispositivo como usuario root.\"}],\"metrics\":{\"cvssMetricV30\":[{\"source\":\"nvd@nist.gov\",\"type\":\"Primary\",\"cvssData\":{\"version\":\"3.0\",\"vectorString\":\"CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N\",\"baseScore\":6.5,\"baseSeverity\":\"MEDIUM\",\"attackVector\":\"NETWORK\",\"attackComplexity\":\"LOW\",\"privilegesRequired\":\"LOW\",\"userInteraction\":\"NONE\",\"scope\":\"UNCHANGED\",\"confidentialityImpact\":\"NONE\",\"integrityImpact\":\"HIGH\",\"availabilityImpact\":\"NONE\"},\"exploitabilityScore\":2.8,\"impactScore\":3.6}],\"cvssMetricV2\":[{\"source\":\"nvd@nist.gov\",\"type\":\"Primary\",\"cvssData\":{\"version\":\"2.0\",\"vectorString\":\"AV:N/AC:L/Au:S/C:N/I:C/A:N\",\"baseScore\":6.8,\"accessVector\":\"NETWORK\",\"accessComplexity\":\"LOW\",\"authentication\":\"SINGLE\",\"confidentialityImpact\":\"NONE\",\"integrityImpact\":\"COMPLETE\",\"availabilityImpact\":\"NONE\"},\"baseSeverity\":\"MEDIUM\",\"exploitabilityScore\":8.0,\"impactScore\":6.9,\"acInsufInfo\":false,\"obtainAllPrivilege\":false,\"obtainUserPrivilege\":false,\"obtainOtherPrivilege\":false,\"userInteractionRequired\":false}]},\"weaknesses\":[{\"source\":\"nvd@nist.gov\",\"type\":\"Primary\",\"description\":[{\"lang\":\"en\",\"value\":\"CWE-22\"}]}],\"configurations\":[{\"operator\":\"AND\",\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:lenovo:lenovoemc_firmware:*:*:*:*:*:*:*:*\",\"versionEndIncluding\":\"4.1.402.34662\",\"matchCriteriaId\":\"807B7582-8A34-4497-A2D7-BEF260790FD1\"}]},{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":false,\"criteria\":\"cpe:2.3:h:lenovo:iomega_ez_media_\\\\\u0026_backup_center:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"76CDC771-1E75-4FA2-ACAD-6B76A3B41E87\"},{\"vulnerable\":false,\"criteria\":\"cpe:2.3:h:lenovo:iomega_storcenter_ix2:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"2C6174F7-8D2C-4EA2-84B5-2F336C4921D3\"},{\"vulnerable\":false,\"criteria\":\"cpe:2.3:h:lenovo:iomega_storcenter_ix2-dl:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"E19F81E4-64E2-42F3-8BF9-0E0B2C4B901B\"},{\"vulnerable\":false,\"criteria\":\"cpe:2.3:h:lenovo:iomega_storcenter_ix4-300d:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"FDCCCF7E-0A84-44DC-A48B-577183A4BA7C\"},{\"vulnerable\":false,\"criteria\":\"cpe:2.3:h:lenovo:iomega_storcenter_px12-400r:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"D840F199-8607-470E-9AE9-97459C041C11\"},{\"vulnerable\":false,\"criteria\":\"cpe:2.3:h:lenovo:iomega_storcenter_px12-450r:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"0ED64A7B-B398-4A21-A93A-17C9CF9D6AC8\"},{\"vulnerable\":false,\"criteria\":\"cpe:2.3:h:lenovo:iomega_storcenter_px2-300d:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"B10F7589-A7F5-4CA3-A959-0FC457EC605D\"},{\"vulnerable\":false,\"criteria\":\"cpe:2.3:h:lenovo:iomega_storcenter_px4-300d:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"179EC0F5-606D-4DC2-898A-D243AB12680F\"},{\"vulnerable\":false,\"criteria\":\"cpe:2.3:h:lenovo:iomega_storcenter_px4-300r:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"D74B9A44-814D-4415-BC82-0C3BE0E6FCF1\"},{\"vulnerable\":false,\"criteria\":\"cpe:2.3:h:lenovo:iomega_storcenter_px6-300d:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"EF84CD08-A8D6-4C6E-9A4C-BC32981EF8C9\"},{\"vulnerable\":false,\"criteria\":\"cpe:2.3:h:lenovo:lenovo_ez_media_\\\\\u0026_backup_center:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"9C52F618-C9B0-470B-96BB-3BFB01797D47\"},{\"vulnerable\":false,\"criteria\":\"cpe:2.3:h:lenovo:lenovo_ix2:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"ED38E2D0-50BE-4D0F-AD79-BCC14FBF17E7\"},{\"vulnerable\":false,\"criteria\":\"cpe:2.3:h:lenovo:lenovo_ix4-300d:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"39F19015-369E-41F4-A543-7B56C08194B3\"},{\"vulnerable\":false,\"criteria\":\"cpe:2.3:h:lenovo:lenovoemc_px12-400r:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"6A437398-827A-4A22-AC7B-984BABEE328A\"},{\"vulnerable\":false,\"criteria\":\"cpe:2.3:h:lenovo:lenovoemc_px12-450r:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"24C29B73-FC3B-4440-B75B-7454E8AE5403\"},{\"vulnerable\":false,\"criteria\":\"cpe:2.3:h:lenovo:lenovoemc_px2-300d:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"AE20E31A-28B9-4186-B3D0-60619799E8B1\"},{\"vulnerable\":false,\"criteria\":\"cpe:2.3:h:lenovo:lenovoemc_px4-300d:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"BA4AD8BC-4BCA-4850-8058-AE4B669A4C89\"},{\"vulnerable\":false,\"criteria\":\"cpe:2.3:h:lenovo:lenovoemc_px4-300r:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"014B2DE3-3012-4821-8CC8-A90474C95DA7\"},{\"vulnerable\":false,\"criteria\":\"cpe:2.3:h:lenovo:lenovoemc_px4-400d:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"DC2EB779-CFAA-45BB-8D4B-DD6CFB31A34A\"},{\"vulnerable\":false,\"criteria\":\"cpe:2.3:h:lenovo:lenovoemc_px4-400r:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"1C208CA2-2928-43FC-8477-895738579855\"},{\"vulnerable\":false,\"criteria\":\"cpe:2.3:h:lenovo:lenovoemc_px6-300d:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"0AD5BFDB-E0A0-4C36-8102-05D5F0DAA87D\"}]}]}],\"references\":[{\"url\":\"https://support.lenovo.com/us/en/solutions/LEN-24224\",\"source\":\"psirt@lenovo.com\",\"tags\":[\"Vendor Advisory\"]},{\"url\":\"https://support.lenovo.com/us/en/solutions/LEN-24224\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Vendor Advisory\"]}]}}"
  }
}


Log in or create an account to share your comment.




Tags
Taxonomy of the tags.




Sightings

Author Source Type Date

Nomenclature

  • Seen: The vulnerability was mentioned, discussed, or observed by the user.
  • Confirmed: The vulnerability has been validated from an analyst's perspective.
  • Published Proof of Concept: A public proof of concept is available for this vulnerability.
  • Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
  • Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
  • Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
  • Not confirmed: The user expressed doubt about the validity of the vulnerability.
  • Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.



Detection rules are retrieved from Rulezet.