Unrated severityNVD Advisory· Published Sep 28, 2018· Updated Aug 5, 2024
Iomega and LenovoEMC NAS Web UI Vulnerabilities
CVE-2018-9079
Description
For some Iomega, Lenovo, LenovoEMC NAS devices versions 4.1.402.34662 and earlier, adversaries can craft URLs to modify the Document Object Model (DOM) of the page. In addition, adversaries can inject HTML script tags and HTML tags with JavaScript handlers to execute arbitrary JavaScript with the origin of the device.
Affected products
1- Range: 4.1.402.34662
Patches
0No patches discovered yet.
Vulnerability mechanics
AI mechanics synthesis has not run for this CVE yet.
References
1- support.lenovo.com/us/en/solutions/LEN-24224mitrex_refsource_CONFIRM
News mentions
0No linked articles in our index yet.