CVE-2018-9074

For some Iomega, Lenovo, LenovoEMC NAS devices versions 4.1.402.34662 and earlier, the file upload functionality of the Content Explorer application is vulnerable to path traversal. As a result, users can upload files anywhere on the device's operating system as the root user...

PT-2002-2670 · Iomega · Iomega Nas A300U

Name of the Vulnerable Software and Affected Versions: Iomega NAS A300U Description: The issue concerns the transmission of passwords in cleartext by the Network Attached Storage NAS Administration Web Page, allowing remote attackers to intercept the administrative password. Recommendations: For...