CVE-2018-9082

creationtimestamp| type| source ---|---|--- 2018-10-03 15:26:43+00:00| seen| MISP/5bb4df32-f218-45d9-aa7e-1dc00a021402...

Nine NAS Bugs Open LenovoEMC, Iomega Devices to Attack

Lenovo is warning of nine vulnerabilities rated “high” and impacting 20 separate network attached storage NAS devices sold by the company, including its LenovoEMC, Iomega and its Lenovo-branded NAS devices. By exploiting one of several command-injection vulnerabilities in the devices’ operating...

CVE-2018-9082

CVE-2018-9082 affects Iomega/LenovoEMC NAS devices (notably versions 4.1.402.34662 and earlier). The vulnerability allows an authenticated user to change the target account password without providing the current password, enabling session token-based takeover and persistent access. Exploitation c...