Iomega Storcenter
Approved changes feed: RSS · Atom
cpe:2.3:a:lenovo_group_ltd:iomega_storcenter:*:*:*:*:*:*:*:*
part: a version: * update: *
| Vendor | Lenovo Group Ltd (0d9fedbd-c7bc-5f57-9378-8c8e5b934cf0) |
|---|---|
| Product | Iomega Storcenter (a59f7601-53fe-5c38-b494-9e8c4809bc19) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from gcve-enriched-dumps CVE data |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2018-9082 |
vulnerable | 2026-06-08 05:12:07.741478 |
Iomega and LenovoEMC NAS Web UI Vulnerabilities
For some Iomega, Lenovo, LenovoEMC NAS devices versions 4.1.402.34662 and earlier, the password changing functionality available to authenticated users does not require the user's current password to set a new one. As a result, attackers with access to the user's session tokens can change their password and retain access to the user's account
Published: 2018-09-28T20:00:00.000Z
Updated: 2024-08-05T07:17:50.627Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2018-9081 |
vulnerable | 2026-06-08 05:12:07.739242 |
Iomega and LenovoEMC NAS Web UI Vulnerabilities
For some Iomega, Lenovo, LenovoEMC NAS devices versions 4.1.402.34662 and earlier, the file name used for assets accessible through the Content Viewer application are vulnerable to self cross-site scripting self-XSS. As a result, adversaries can add files to shares accessible from the Content Viewer with a cross site scripting payload in its name, and wait for a user to try and rename the file for their payload to trigger.
Published: 2018-09-28T20:00:00.000Z
Updated: 2024-08-05T07:17:50.658Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2018-9080 |
vulnerable | 2026-06-08 05:12:07.736762 |
Iomega and LenovoEMC NAS Web UI Vulnerabilities
For some Iomega, Lenovo, LenovoEMC NAS devices versions 4.1.402.34662 and earlier, by setting the Iomega cookie to a known value before logging into the NAS's web application, the NAS will not provide the user a new cookie value. This allows an attacker who knows the cookie's value to compromise the user's session.
Published: 2018-09-28T20:00:00.000Z
Updated: 2024-08-05T07:17:50.641Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2018-9079 |
vulnerable | 2026-06-08 05:12:07.734789 |
Iomega and LenovoEMC NAS Web UI Vulnerabilities
For some Iomega, Lenovo, LenovoEMC NAS devices versions 4.1.402.34662 and earlier, adversaries can craft URLs to modify the Document Object Model (DOM) of the page. In addition, adversaries can inject HTML script tags and HTML tags with JavaScript handlers to execute arbitrary JavaScript with the origin of the device.
Published: 2018-09-28T20:00:00.000Z
Updated: 2024-08-05T07:17:50.623Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2018-9078 |
vulnerable | 2026-06-08 05:12:07.703440 |
Iomega and LenovoEMC NAS Web UI Vulnerabilities
For some Iomega, Lenovo, LenovoEMC NAS devices versions 4.1.402.34662 and earlier, the Content Explorer application grants users the ability to upload files to shares and this image was rendered in the browser in the device's origin instead of prompting to download the asset. The application does not prevent the user from uploading SVG images and returns these images within their origin. As a result, malicious users can upload SVG images that contain arbitrary JavaScript that is evaluated when the victim issues a request to download the file.
Published: 2018-09-28T20:00:00.000Z
Updated: 2024-08-05T07:17:50.689Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2018-9077 |
vulnerable | 2026-06-08 05:12:07.701802 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2018-9076 |
vulnerable | 2026-06-08 05:12:07.700010 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2018-9075 |
vulnerable | 2026-06-08 05:12:07.698922 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2018-9074 |
vulnerable | 2026-06-08 05:12:07.684237 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.