CVE-2018-9077

For some Iomega, Lenovo, LenovoEMC NAS devices versions 4.1.402.34662 and earlier, when changing the name of a share, an attacker can craft a command injection payload using backtick "" characters in the share : name parameter. As a result, arbitrary commands may be executed as the root user. The...

CVE-2018-9074

For some Iomega, Lenovo, LenovoEMC NAS devices versions 4.1.402.34662 and earlier, the file upload functionality of the Content Explorer application is vulnerable to path traversal. As a result, users can upload files anywhere on the device's operating system as the root user...

CVE-2018-9075

For some Iomega, Lenovo, LenovoEMC NAS devices versions 4.1.402.34662 and earlier, when joining a PersonalCloud setup, an attacker can craft a command injection payload using backtick "" characters in the client:password parameter. As a result, arbitrary commands may be executed as the root user...

Default credentials

For some Iomega, Lenovo, LenovoEMC NAS devices versions 4.1.402.34662 and earlier, the password changing functionality available to authenticated users does not require the user's current password to set a new one. As a result, attackers with access to the user's session tokens can change their...

CVE-2018-9079

For some Iomega, Lenovo, LenovoEMC NAS devices versions 4.1.402.34662 and earlier, adversaries can craft URLs to modify the Document Object Model DOM of the page. In addition, adversaries can inject HTML script tags and HTML tags with JavaScript handlers to execute arbitrary JavaScript with the...

Session fixation

For some Iomega, Lenovo, LenovoEMC NAS devices versions 4.1.402.34662 and earlier, by setting the Iomega cookie to a known value before logging into the NAS's web application, the NAS will not provide the user a new cookie value. This allows an attacker who knows the cookie's value to compromise...

Cross site scripting

For some Iomega, Lenovo, LenovoEMC NAS devices versions 4.1.402.34662 and earlier, the file name used for assets accessible through the Content Viewer application are vulnerable to self cross-site scripting self-XSS. As a result, adversaries can add files to shares accessible from the Content...

CVE-2018-9076

CVE-2018-9076 affects Iomega/LenovoEMC NAS devices (firmware 4.1.402.34662 and earlier). The vulnerability is a command-injection in share-name handling that can lead to arbitrary root commands when a payload uses backtick characters in the name parameter (requires __c and iomega parameters). Som...

CVE-2018-9075

CVE-2018-9075 affects certain Iomega/Lenovo/LenovoEMC NAS devices (firmware 4.1.402.34662 and earlier). The vulnerability is a command-injection flaw in the NAS Web UI when joining a PersonalCloud setup, where an attacker can craft a payload using backtick characters in client:password and, with ...

CVE-2018-9081

CVE-2018-9081 affects Iomega, LenovoEMC NAS devices (4.1.402.34662 and earlier) with Content Viewer assets vulnerability enabling self-XSS via file names. Attackers could chain vulnerabilities (token theft, CSRF) to gain unauthorized shell access or escalate privilege on affected devices, impacti...

CVE-2018-9079

CVE-2018-9079 describes a web UI vulnerability affecting some Iomega, Lenovo, and LenovoEMC NAS devices running version 4.1.402.34662 and earlier. The issue allows an attacker to craft URLs that modify the device’s DOM and inject HTML/JavaScript, enabling execution with the device origin. Based o...

CVE-2018-9076 Iomega and LenovoEMC NAS Web UI Vulnerabilities

For some Iomega, Lenovo, LenovoEMC NAS devices versions 4.1.402.34662 and earlier, when changing the name of a share, an attacker can craft a command injection payload using backtick "" characters in the name parameter. As a result, arbitrary commands may be executed as the root user. The attack...

CVE-2018-9074

CVE-2018-9074 affects some Iomega/LenovoEMC NAS devices (specifically 4.1.402.34662 and earlier) where the Content Explorer file upload is vulnerable to path traversal, allowing files to be written anywhere on the device as root. The vulnerability is discussed in public disclosures, with Lenovo i...

CVE-2018-9078 Iomega and LenovoEMC NAS Web UI Vulnerabilities

For some Iomega, Lenovo, LenovoEMC NAS devices versions 4.1.402.34662 and earlier, the Content Explorer application grants users the ability to upload files to shares and this image was rendered in the browser in the device's origin instead of prompting to download the asset. The application does...

CVE-2018-9082

CVE-2018-9082 affects Iomega/LenovoEMC NAS devices (notably versions 4.1.402.34662 and earlier). The vulnerability allows an authenticated user to change the target account password without providing the current password, enabling session token-based takeover and persistent access. Exploitation c...

CVE-2018-9082 Iomega and LenovoEMC NAS Web UI Vulnerabilities

For some Iomega, Lenovo, LenovoEMC NAS devices versions 4.1.402.34662 and earlier, the password changing functionality available to authenticated users does not require the user's current password to set a new one. As a result, attackers with access to the user's session tokens can change their...

CVE-2018-9079 Iomega and LenovoEMC NAS Web UI Vulnerabilities

For some Iomega, Lenovo, LenovoEMC NAS devices versions 4.1.402.34662 and earlier, adversaries can craft URLs to modify the Document Object Model DOM of the page. In addition, adversaries can inject HTML script tags and HTML tags with JavaScript handlers to execute arbitrary JavaScript with the...

CVE-2018-9077

CVE-2018-9077 affects certain Iomega/LenovoEMC NAS devices (firmware 4.1.402.34662 and earlier). The flaw allows a command-injection by crafting a backtick-based payload in the share name parameter, enabling arbitrary commands to run as root. The attack relies on a value parameterized as __c alon...

CVE-2018-9077 Iomega and LenovoEMC NAS Web UI Vulnerabilities

For some Iomega, Lenovo, LenovoEMC NAS devices versions 4.1.402.34662 and earlier, when changing the name of a share, an attacker can craft a command injection payload using backtick "" characters in the share : name parameter. As a result, arbitrary commands may be executed as the root user. The...

CVE-2018-9078

CVE-2018-9078 affects Iomega/LenovoEMC NAS devices (Content Explorer) up to firmware 4.1.402.34662. The Web UI allowed uploading SVGs and served them from the device origin, enabling SVGs containing JavaScript that executes when downloaded by a victim, effectively enabling an in-browser XSS. Affe...