CVE-2018-9077

Iomega and LenovoEMC NAS Web UI Vulnerabilities

N/A

Published: September 28, 2018 at 08:00 PM UTC

Updated: June 17, 2026 at 02:06 AM UTC

24 products affected across 1 vendorLenovoemc FirmwareIomega Storcenter Px12-450RIomega Storcenter Px2-300D

Using Iomega StorCenter by Lenovo Group LTD?

Get instant alerts when new vulnerabilities affect Iomega StorCenter - before attackers find them.

Real-time alertsTrack your software stackFree plan available

Start Free Sign In

Severity

N/A

Exploit prediction

EPSS 2%

Description

For some Iomega, Lenovo, LenovoEMC NAS devices versions 4.1.402.34662 and earlier, when changing the name of a share, an attacker can craft a command injection payload using backtick "``" characters in the share : name parameter. As a result, arbitrary commands may be executed as the root user. The attack requires a value __c and iomega parameter.

Affected

Our own answer: ranges merged, affected separated from platform-only, with confidence and review flags.

Lenovoemc Firmware · Lenovo

95%

v ≤ 4.1.402.346624.1.402.34662

lenovo-iomega-ez-media-backup-center (environment) · lenovo-iomega-storcenter-ix2 (environment) · lenovo-iomega-storcenter-ix2-dl (environment) · lenovo-iomega-storcenter-ix4-300d (environment) · lenovo-iomega-storcenter-px12-400r (environment) · lenovo-iomega-storcenter-px12-450r (environment) · lenovo-iomega-storcenter-px2-300d (environment) · lenovo-iomega-storcenter-px4-300d (environment) · lenovo-iomega-storcenter-px4-300r (environment) · lenovo-iomega-storcenter-px6-300d (environment) · lenovo-lenovo-ez-media-backup-center (environment) · lenovo-lenovo-ix2 (environment) · lenovo-lenovo-ix4-300d (environment) · lenovo-lenovoemc-px12-400r (same device) · lenovo-lenovoemc-px12-450r (same device) · lenovo-lenovoemc-px2-300d (same device) · lenovo-lenovoemc-px4-300d (same device) · lenovo-lenovoemc-px4-300r (same device) · lenovo-lenovoemc-px4-400d (same device) · lenovo-lenovoemc-px4-400r (same device) · lenovo-lenovoemc-px6-300d (same device)

Ez Media & Backup Center Firmware · Lenovo

60%

4.1.402.34662

Iomega StorCenter · Lenovo

60%

4.1.402.34662

Iomega Ez Media & Backup Center · Lenovodevice

80%

All versions

Iomega Storcenter Ix2 · Lenovodevice

80%

All versions