High severity8.8NVD Advisory· Published Jul 16, 2019· Updated Jun 17, 2026

CVE-2019-6160

Description

A vulnerability in various versions of Iomega and LenovoEMC NAS products could allow an unauthenticated user to access files on NAS shares via the API.

Affected products

Lenovo/Home Media Network Hard Drive Firmware
cpe:2.3:o:lenovo:home_media_network_hard_drive_firmware:*:*:*:*:cloud:*:*:*
Range: <3.2.16.30221
Lenovo/Ix12 300r Firmware
cpe:2.3:o:lenovo:ix12-300r_firmware:*:*:*:*:*:*:*:*
Range: <4.0.24.34808
Lenovo/Px12 350r Firmware
cpe:2.3:o:lenovo:px12-350r_firmware:*:*:*:*:*:*:*:*
Range: <4.0.24.34808
Lenovo/Storcenter Ix2 200 Firmware2 versions
cpe:2.3:o:lenovo:storcenter_ix2-200_firmware:*:*:*:*:*:*:*:*+ 1 more
- cpe:2.3:o:lenovo:storcenter_ix2-200_firmware:*:*:*:*:*:*:*:*range: <2.1.50.30227
- cpe:2.3:o:lenovo:storcenter_ix2-200_firmware:*:*:*:*:cloud:*:*:*range: <3.2.16.30221
Lenovo/Storcenter Ix4 200d Firmware2 versions
cpe:2.3:o:lenovo:storcenter_ix4-200d_firmware:*:*:*:*:*:*:*:*+ 1 more
- cpe:2.3:o:lenovo:storcenter_ix4-200d_firmware:*:*:*:*:*:*:*:*range: <2.1.50.30227
- cpe:2.3:o:lenovo:storcenter_ix4-200d_firmware:*:*:*:*:cloud:*:*:*range: <3.2.16.30221
Lenovo/Storcenter Ix4 200rl Firmware
cpe:2.3:o:lenovo:storcenter_ix4-200rl_firmware:*:*:*:*:*:*:*:*
Range: <2.1.50.30227
LenovoEMC/NAS productsllm-fuzzy
Iomega/NAS productsllm-fuzzy
Iomega and LenovoEMC/NAS productsv5
Range: various

cvss	0.572
epss	0.001
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000

CVE-2019-6160

Description

Affected products

Patches

Vulnerability mechanics

References

News mentions