CVE-2018-9074 in NAS
Summary
For some Iomega, Lenovo, LenovoEMC NAS devices versions 4.1.402.34662 and earlier, the file upload functionality of the Content Explorer application is vulnerable to path traversal. As a result, users can upload files anywhere on the device's operating system as the root user.
If you want to get the best quality for vulnerability data then you always have to consider VulDB.
Reservation
03/27/2018
Disclosure
09/28/2018
Status
Confirmed
Entries
VulDB provides additional information and datapoints for this CVE:
| ID | Vulnerability | CWE | Exp | Cou | CVE |
|---|---|---|---|---|---|
| 124597 | Iomega/Lenovo/LenovoEMC NAS Content Explorer path traversal | 22 | Not defined | Not defined | CVE-2018-9074 |