Medium severity6.1NVD Advisory· Published Feb 14, 2020· Updated Jun 17, 2026

CVE-2019-19758

Description

A vulnerability in the web interface of Lenovo EZ Media & Backup Center, ix2 & ix2-dl version 4.1.406.34763 and prior could allow an unauthenticated, remote attacker to redirect a user to an untrusted web page.

Affected products

Lenovo/Ez Media \& Backup Center Ix2 Dl Firmware
cpe:2.3:o:lenovo:ez_media_\&_backup_center_ix2-dl_firmware:*:*:*:*:*:*:*:*
Range: <=-4.1.406.34763
Lenovo/Ez Media \& Backup Center Ix2 Firmware
cpe:2.3:o:lenovo:ez_media_\&_backup_center_ix2_firmware:*:*:*:*:*:*:*:*
Range: <=4.1.406.34763
Lenovo/EZ Media & Backup Centerllm-create
Range: <=4.1.406.34763
Lenovo/ix2llm-create
Range: <=4.1.406.34763
Lenovo/ix2-dlllm-create
Range: <=4.1.406.34763
Lenovo/EZ Media & Backupcpe-rescue2 versions
unspecified+ 1 more
- (no CPE)range: unspecified
- (no CPE)range: unspecified

Patches

Vulnerability mechanics

References

support.lenovo.com/us/en/product_security/LEN-30242nvdVendor Advisory

News mentions

No linked articles in our index yet.

cvss	0.397
epss	0.001
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000