Critical severity9.8NVD Advisory· Published Sep 28, 2018· Updated Jun 17, 2026
CVE-2018-9079
CVE-2018-9079
Description
For some Iomega, Lenovo, LenovoEMC NAS devices versions 4.1.402.34662 and earlier, adversaries can craft URLs to modify the Document Object Model (DOM) of the page. In addition, adversaries can inject HTML script tags and HTML tags with JavaScript handlers to execute arbitrary JavaScript with the origin of the device.
Affected products
2- Range: <=4.1.402.34662
- Range: 4.1.402.34662
Patches
Vulnerability mechanics
References
1- support.lenovo.com/us/en/solutions/LEN-24224nvdVendor Advisory
News mentions
0No linked articles in our index yet.