CVE-2019-6178

—

CVSS 3.1

5.3 medium

EPSS

1%p64

Published

Aug 19, 2019 (Aug 19, 2019)

Modified

Jun 17, 2026

Description

An information leakage vulnerability in Iomega and LenovoEMC NAS products could allow disclosure of some device details such as Share names through the device API when Personal Cloud is enabled. This does not allow read, write, delete, or any other access to the underlying file systems and their contents.

Vendors: lenovo
Products: px12-350r firmware, ix12-300r firmware, home media network hard drive firmware, storecenter ix2-200 firmware, storecenter ix4-200d firmware, storecenter ix4-200rl firmware
Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N

NVD CVE.org GitHub PoCs EPSS (1.1%)

In the news1 stories

Flaw in Iomega, LenovoEMC NAS devices exposes millions of files on the Internet

Help Net SecurityAug 20, 10:57 UTC · Aug 20, 2019Vulnerability CVE-2019-6160 CVE-2019-6178