CVE-2018-9076

  1. Reconshell
  2. Vulnerabilities (CVE)
  3. CVE-2018-9076
For some Iomega, Lenovo, LenovoEMC NAS devices versions 4.1.402.34662 and earlier, when changing the name of a share, an attacker can craft a command injection payload using backtick "``" characters in the name parameter. As a result, arbitrary commands may be executed as the root user. The attack requires a value __c and iomega parameter.

8.1 /10

CVSS v3.0 : HIGH

V3 Legend

Vector : AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H

Exploitability : 2.2 / Impact : 5.9

Attack Vector NETWORK

Attack Complexity HIGH

Privileges Required NONE

User Interaction NONE

Confidentiality Impact HIGH

Integrity Impact HIGH

Availability Impact HIGH

Scope UNCHANGED

9.3 /10

CVSS v2.0 : HIGH

V2 Legend

Vector : AV:N/AC:M/Au:N/C:C/I:C/A:C

Exploitability : 8.6 / Impact : 10.0

Access Vector NETWORK

Access Complexity MEDIUM

Authentication NONE

Confidentiality Impact COMPLETE

Integrity Impact COMPLETE

Availability Impact COMPLETE

References
Link Resource
https://support.lenovo.com/us/en/solutions/LEN-24224 Vendor Advisory
Advertisement

NeevaHost hosting service
Configurations

Configuration 1 (hide)

AND
cpe:2.3:o:lenovo:lenovoemc_firmware:*:*:*:*:*:*:*:*
OR cpe:2.3:h:lenovo:lenovo_ix2:-:*:*:*:*:*:*:*
cpe:2.3:h:lenovo:lenovo_ez_media_\&_backup_center:-:*:*:*:*:*:*:*
cpe:2.3:h:lenovo:lenovoemc_px2-300d:-:*:*:*:*:*:*:*
cpe:2.3:h:lenovo:lenovoemc_px4-300d:-:*:*:*:*:*:*:*
cpe:2.3:h:lenovo:iomega_storcenter_px4-300r:-:*:*:*:*:*:*:*
cpe:2.3:h:lenovo:iomega_storcenter_px6-300d:-:*:*:*:*:*:*:*
cpe:2.3:h:lenovo:iomega_storcenter_px4-300d:-:*:*:*:*:*:*:*
cpe:2.3:h:lenovo:iomega_storcenter_px2-300d:-:*:*:*:*:*:*:*
cpe:2.3:h:lenovo:iomega_storcenter_ix4-300d:-:*:*:*:*:*:*:*
cpe:2.3:h:lenovo:lenovoemc_px12-400r:-:*:*:*:*:*:*:*
cpe:2.3:h:lenovo:lenovoemc_px12-450r:-:*:*:*:*:*:*:*
cpe:2.3:h:lenovo:iomega_storcenter_px12-450r:-:*:*:*:*:*:*:*
cpe:2.3:h:lenovo:iomega_storcenter_px12-400r:-:*:*:*:*:*:*:*
cpe:2.3:h:lenovo:iomega_storcenter_ix2:-:*:*:*:*:*:*:*
cpe:2.3:h:lenovo:iomega_storcenter_ix2-dl:-:*:*:*:*:*:*:*
cpe:2.3:h:lenovo:iomega_ez_media_\&_backup_center:-:*:*:*:*:*:*:*
cpe:2.3:h:lenovo:lenovo_ix4-300d:-:*:*:*:*:*:*:*
cpe:2.3:h:lenovo:lenovoemc_px4-400d:-:*:*:*:*:*:*:*
cpe:2.3:h:lenovo:lenovoemc_px6-300d:-:*:*:*:*:*:*:*
cpe:2.3:h:lenovo:lenovoemc_px4-300r:-:*:*:*:*:*:*:*
cpe:2.3:h:lenovo:lenovoemc_px4-400r:-:*:*:*:*:*:*:*
Information

Published : 2018-09-28 13:29

Updated : 2019-10-02 17:03

NVD link : CVE-2018-9076

Mitre link : CVE-2018-9076

JSON object : View

CWE
CWE-78

Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')

Advertisement

dedicated server usa
Products Affected

lenovo

  • lenovoemc_px4-300d
  • iomega_storcenter_px2-300d
  • lenovoemc_firmware
  • iomega_storcenter_ix2
  • lenovoemc_px6-300d
  • iomega_storcenter_px12-400r
  • lenovo_ix4-300d
  • lenovoemc_px2-300d
  • lenovoemc_px4-300r
  • lenovo_ix2
  • iomega_storcenter_px4-300r
  • iomega_storcenter_ix2-dl
  • lenovoemc_px4-400d
  • lenovo_ez_media_\&_backup_center
  • iomega_storcenter_px4-300d
  • iomega_storcenter_px12-450r
  • lenovoemc_px12-450r
  • lenovoemc_px4-400r
  • iomega_storcenter_px6-300d
  • lenovoemc_px12-400r
  • iomega_storcenter_ix4-300d
  • iomega_ez_media_\&_backup_center