2 lines
6.1 KiB
JSON
2 lines
6.1 KiB
JSON
{"affected":[{"affectedData":[{"product":"NAS products","vendor":"Iomega and LenovoEMC","versions":[{"status":"affected","version":"various"}]}],"source":"psirt@lenovo.com"}],"configurations":[{"nodes":[{"cpeMatch":[{"criteria":"cpe:2.3:o:lenovo:px12-350r_firmware:*:*:*:*:*:*:*:*","matchCriteriaId":"61214E32-2C84-4AEE-8E7D-9C8D5C338F92","versionEndExcluding":"4.0.24.34808","vulnerable":true}],"negate":false,"operator":"OR"},{"cpeMatch":[{"criteria":"cpe:2.3:h:lenovo:px12-350r:-:*:*:*:*:*:*:*","matchCriteriaId":"ACA01452-5C7E-4D17-B0EA-1452BD8E9D3D","vulnerable":false}],"negate":false,"operator":"OR"}],"operator":"AND"},{"nodes":[{"cpeMatch":[{"criteria":"cpe:2.3:o:lenovo:ix12-300r_firmware:*:*:*:*:*:*:*:*","matchCriteriaId":"8EF2CD56-1F60-4E73-84D8-3130ADF35917","versionEndExcluding":"4.0.24.34808","vulnerable":true}],"negate":false,"operator":"OR"},{"cpeMatch":[{"criteria":"cpe:2.3:h:lenovo:ix12-300r:-:*:*:*:*:*:*:*","matchCriteriaId":"7DEEAB5E-4F49-4315-B331-E96D3C36BF7D","vulnerable":false}],"negate":false,"operator":"OR"}],"operator":"AND"},{"nodes":[{"cpeMatch":[{"criteria":"cpe:2.3:o:lenovo:home_media_network_hard_drive_firmware:*:*:*:*:cloud:*:*:*","matchCriteriaId":"CE01E59B-BB43-467A-A983-FCB2B485FD91","versionEndExcluding":"3.2.16.30221","vulnerable":true}],"negate":false,"operator":"OR"},{"cpeMatch":[{"criteria":"cpe:2.3:h:lenovo:home_media_network_hard_drive:-:*:*:*:*:*:*:*","matchCriteriaId":"B79E103A-705F-4BAA-98DC-290302CB298E","vulnerable":false}],"negate":false,"operator":"OR"}],"operator":"AND"},{"nodes":[{"cpeMatch":[{"criteria":"cpe:2.3:o:lenovo:storcenter_ix2-200_firmware:*:*:*:*:cloud:*:*:*","matchCriteriaId":"E68008D9-E672-44E6-9110-A1084A297CC7","versionEndExcluding":"3.2.16.30221","vulnerable":true}],"negate":false,"operator":"OR"},{"cpeMatch":[{"criteria":"cpe:2.3:h:lenovo:storcenter_ix2-200:-:*:*:*:*:*:*:*","matchCriteriaId":"ECC671AA-4C30-47DE-8BE4-986F480356C1","vulnerable":false}],"negate":false,"operator":"OR"}],"operator":"AND"},{"nodes":[{"cpeMatch":[{"criteria":"cpe:2.3:o:lenovo:storcenter_ix4-200d_firmware:*:*:*:*:cloud:*:*:*","matchCriteriaId":"8355B16F-A04F-4AB0-A3AF-1108D7D81D7C","versionEndExcluding":"3.2.16.30221","vulnerable":true}],"negate":false,"operator":"OR"},{"cpeMatch":[{"criteria":"cpe:2.3:h:lenovo:storcenter_ix4-200d:-:*:*:*:*:*:*:*","matchCriteriaId":"22351E6B-AED2-43CA-A91B-A9C530A465AE","vulnerable":false}],"negate":false,"operator":"OR"}],"operator":"AND"},{"nodes":[{"cpeMatch":[{"criteria":"cpe:2.3:o:lenovo:storcenter_ix2-200_firmware:*:*:*:*:*:*:*:*","matchCriteriaId":"0B6C230F-BB67-4721-AF47-B25FC2DF9099","versionEndExcluding":"2.1.50.30227","vulnerable":true}],"negate":false,"operator":"OR"},{"cpeMatch":[{"criteria":"cpe:2.3:h:lenovo:storcenter_ix-200:-:*:*:*:*:*:*:*","matchCriteriaId":"49029F54-9D53-4B48-BBD1-156F586BBDBB","vulnerable":false}],"negate":false,"operator":"OR"}],"operator":"AND"},{"nodes":[{"cpeMatch":[{"criteria":"cpe:2.3:o:lenovo:storcenter_ix4-200d_firmware:*:*:*:*:*:*:*:*","matchCriteriaId":"C086F80D-C629-49E7-A8B7-581CE3BD3C43","versionEndExcluding":"2.1.50.30227","vulnerable":true}],"negate":false,"operator":"OR"},{"cpeMatch":[{"criteria":"cpe:2.3:h:lenovo:storcenter_ix4-200d:-:*:*:*:*:*:*:*","matchCriteriaId":"22351E6B-AED2-43CA-A91B-A9C530A465AE","vulnerable":false}],"negate":false,"operator":"OR"}],"operator":"AND"},{"nodes":[{"cpeMatch":[{"criteria":"cpe:2.3:o:lenovo:storcenter_ix4-200rl_firmware:*:*:*:*:*:*:*:*","matchCriteriaId":"0B35540D-43A2-42DA-BF5A-38A32A3F07E2","versionEndExcluding":"2.1.50.30227","vulnerable":true}],"negate":false,"operator":"OR"},{"cpeMatch":[{"criteria":"cpe:2.3:h:lenovo:storcenter_ix4-200rl:-:*:*:*:*:*:*:*","matchCriteriaId":"02B4B193-E037-4DCB-94F1-0F7A2D7F290B","vulnerable":false}],"negate":false,"operator":"OR"}],"operator":"AND"}],"cveTags":[],"descriptions":[{"lang":"en","value":"A vulnerability in various versions of Iomega and LenovoEMC NAS products could allow an unauthenticated user to access files on NAS shares via the API."},{"lang":"es","value":"Una vulnerabilidad en varias versiones de los productos NAS de Iomega y LenovoEMC, podría permitir a un usuario no autenticado acceder a archivos en recursos compartidos de NAS por medio de la API."}],"id":"CVE-2019-6160","lastModified":"2026-06-17T02:38:42.170","metrics":{"cvssMetricV2":[{"acInsufInfo":false,"baseSeverity":"MEDIUM","cvssData":{"accessComplexity":"LOW","accessVector":"NETWORK","authentication":"NONE","availabilityImpact":"NONE","baseScore":5.0,"confidentialityImpact":"PARTIAL","integrityImpact":"NONE","vectorString":"AV:N/AC:L/Au:N/C:P/I:N/A:N","version":"2.0"},"exploitabilityScore":10.0,"impactScore":2.9,"obtainAllPrivilege":false,"obtainOtherPrivilege":false,"obtainUserPrivilege":false,"source":"nvd@nist.gov","type":"Primary","userInteractionRequired":false}],"cvssMetricV30":[{"cvssData":{"attackComplexity":"LOW","attackVector":"NETWORK","availabilityImpact":"HIGH","baseScore":8.8,"baseSeverity":"HIGH","confidentialityImpact":"HIGH","integrityImpact":"HIGH","privilegesRequired":"NONE","scope":"UNCHANGED","userInteraction":"REQUIRED","vectorString":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","version":"3.0"},"exploitabilityScore":2.8,"impactScore":5.9,"source":"psirt@lenovo.com","type":"Secondary"},{"cvssData":{"attackComplexity":"LOW","attackVector":"NETWORK","availabilityImpact":"NONE","baseScore":7.5,"baseSeverity":"HIGH","confidentialityImpact":"HIGH","integrityImpact":"NONE","privilegesRequired":"NONE","scope":"UNCHANGED","userInteraction":"NONE","vectorString":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N","version":"3.0"},"exploitabilityScore":3.9,"impactScore":3.6,"source":"nvd@nist.gov","type":"Primary"}]},"published":"2019-07-16T19:15:13.127","references":[{"source":"psirt@lenovo.com","tags":["Patch","Vendor Advisory"],"url":"https://support.lenovo.com/solutions/LEN-25557"},{"source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"],"url":"https://support.lenovo.com/solutions/LEN-25557"}],"sourceIdentifier":"psirt@lenovo.com","vulnStatus":"Modified","weaknesses":[{"description":[{"lang":"en","value":"NVD-CWE-noinfo"}],"source":"nvd@nist.gov","type":"Primary"}]}
|