CVE-2019-6160

—

CVSS 3.0

7.5 high

EPSS

1%p70

Published

Jul 16, 2019 (Jul 16, 2019)

Modified

Jun 17, 2026

Description

A vulnerability in various versions of Iomega and LenovoEMC NAS products could allow an unauthenticated user to access files on NAS shares via the API.

Vendors: lenovo
Products: px12-350r firmware, ix12-300r firmware, home media network hard drive firmware, storcenter ix2-200 firmware, storcenter ix4-200d firmware, storcenter ix4-200rl firmware
Vector: CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

NVD CVE.org GitHub PoCs EPSS (1.4%)

In the news2 stories

Flaw in Iomega, LenovoEMC NAS devices exposes millions of files on the Internet

Help Net SecurityAug 20, 10:57 UTC · Aug 20, 2019Vulnerability CVE-2019-6160 CVE-2019-6178

Flaw in discontinued Iomega/Lenovo NAS devices exposed millions of files

Security AffairsJul 16, 20:13 UTC · Jul 16, 2019Vulnerability CVE-2019-6160