Lenovoemc Firmware
Approved changes feed: RSS · Atom
cpe:2.3:o:lenovo:lenovoemc_firmware:*:*:*:*:*:*:*:*
part: o version: * update: *
| Vendor | Lenovo (c98ed681-bc65-5c44-8bbb-e0a228f96d0e) |
|---|---|
| Product | Lenovoemc Firmware (d657b634-35d1-5da1-92cd-8a725561dbed) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from gcve-enriched-dumps CVE data |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2018-9077 |
vulnerable | 2026-06-08 05:12:07.701877 |
Iomega and LenovoEMC NAS Web UI Vulnerabilities
For some Iomega, Lenovo, LenovoEMC NAS devices versions 4.1.402.34662 and earlier, when changing the name of a share, an attacker can craft a command injection payload using backtick "``" characters in the share : name parameter. As a result, arbitrary commands may be executed as the root user. The attack requires a value __c and iomega parameter.
Published: 2018-09-28T20:00:00.000Z
Updated: 2024-08-05T07:17:50.598Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2018-9076 |
vulnerable | 2026-06-08 05:12:07.700164 |
Iomega and LenovoEMC NAS Web UI Vulnerabilities
For some Iomega, Lenovo, LenovoEMC NAS devices versions 4.1.402.34662 and earlier, when changing the name of a share, an attacker can craft a command injection payload using backtick "``" characters in the name parameter. As a result, arbitrary commands may be executed as the root user. The attack requires a value __c and iomega parameter.
Published: 2018-09-28T20:00:00.000Z
Updated: 2024-08-05T07:17:50.595Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2018-9075 |
vulnerable | 2026-06-08 05:12:07.699020 |
Iomega and LenovoEMC NAS Web UI Vulnerabilities
For some Iomega, Lenovo, LenovoEMC NAS devices versions 4.1.402.34662 and earlier, when joining a PersonalCloud setup, an attacker can craft a command injection payload using backtick "``" characters in the client:password parameter. As a result, arbitrary commands may be executed as the root user. The attack requires a value __c and iomega parameter.
Published: 2018-09-28T20:00:00.000Z
Updated: 2024-08-05T07:17:50.367Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2018-9074 |
vulnerable | 2026-06-08 05:12:07.686555 |
Iomega and LenovoEMC NAS Web UI Vulnerabilities
For some Iomega, Lenovo, LenovoEMC NAS devices versions 4.1.402.34662 and earlier, the file upload functionality of the Content Explorer application is vulnerable to path traversal. As a result, users can upload files anywhere on the device's operating system as the root user.
Published: 2018-09-28T20:00:00.000Z
Updated: 2024-08-05T07:17:50.355Z Reference links |
Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.