CVE-2018-9076

creationtimestamp| type| source ---|---|--- 2018-10-03 15:26:43+00:00| seen| MISP/5bb4df32-f218-45d9-aa7e-1dc00a021402...

CVE-2018-9076 Iomega and LenovoEMC NAS Web UI Vulnerabilities

For some Iomega, Lenovo, LenovoEMC NAS devices versions 4.1.402.34662 and earlier, when changing the name of a share, an attacker can craft a command injection payload using backtick "" characters in the name parameter. As a result, arbitrary commands may be executed as the root user. The attack...

CVE-2018-9076

CVE-2018-9076 affects Iomega/LenovoEMC NAS devices (firmware 4.1.402.34662 and earlier). The vulnerability is a command-injection in share-name handling that can lead to arbitrary root commands when a payload uses backtick characters in the name parameter (requires __c and iomega parameters). Som...

Iomega and LenovoEMC NAS Web UI Vulnerabilities - Lenovo Support US

No description provided...