Lucene search

DellCVE-2012-2283

HistoryAug 16, 2012 - 10:38 a.m.

CVE-2012-2283

2012-08-1610:38:03

dell

web.nvd.nist.gov

iomega

home media network

hard drive

emc lifeline

firmware

remote access

authenticated users

data modification

nvd

CVSS2

5.5

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

SINGLE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:L/Au:S/C:P/I:P/A:N

AI Score

6.6

Confidence

Low

EPSS

0.001

Percentile

49.7%

JSON

The Iomega Home Media Network Hard Drive with EMC Lifeline firmware before 2.104, Home Media Network Hard Drive Cloud Edition with EMC Lifeline firmware before 3.2.3.15290, iConnect with EMC Lifeline firmware before 2.5.26.18966, and StorCenter with EMC Lifeline firmware before 2.0.18.23122, 2.1.x before 2.1.42.18967, and 3.x before 3.2.3.15290 allow remote authenticated users to read or modify data on arbitrary remote shares via unspecified vectors.

Affected configurations

Nvd

Node

emclifelineRange≤2.103

AND

iomegahome_media_network_hard_drive

Node

emclifelineRange≤3.2.3.15289

AND

iomegahome_media_network_hard_drivecloud

Node

emclifelineRange≤2.5.26.18965

AND

iomegaiconnect

Node

emclifelineRange≤2.0.18.23121

emclifelineRange2.1.0–2.1.42.18966

emclifelineRange3.0–3.2.3.15290

emclifelineMatch23.2.3.15289

AND

iomegastorcenter

VendorProductVersionCPE
emclifeline*cpe:2.3:o:emc:lifeline:*:*:*:*:*:*:*:*
iomegahome_media_network_hard_drive*cpe:2.3:h:iomega:home_media_network_hard_drive:*:*:*:*:*:*:*:*
iomegahome_media_network_hard_drive*cpe:2.3:h:iomega:home_media_network_hard_drive:*:*:cloud:*:*:*:*:*
iomegaiconnect*cpe:2.3:h:iomega:iconnect:*:*:*:*:*:*:*:*
emclifeline23.2.3.15289cpe:2.3:o:emc:lifeline:23.2.3.15289:*:*:*:*:*:*:*
iomegastorcenter*cpe:2.3:h:iomega:storcenter:*:*:*:*:*:*:*:*

Vendor	Product	Version	CPE
emc	lifeline	*	cpe:2.3:o:emc:lifeline::::::::
iomega	home_media_network_hard_drive	*	cpe:2.3:h:iomega:home_media_network_hard_drive::::::::
iomega	home_media_network_hard_drive	*	cpe:2.3:h:iomega:home_media_network_hard_drive:::cloud:::::*
iomega	iconnect	*	cpe:2.3:h:iomega:iconnect::::::::
emc	lifeline	23.2.3.15289	cpe:2.3:o:emc:lifeline:23.2.3.15289:::::::*
iomega	storcenter	*	cpe:2.3:h:iomega:storcenter::::::::

References

archives.neohapsis.com/archives/bugtraq/2012-08/0056.html

CVSS2

5.5

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

SINGLE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:L/Au:S/C:P/I:P/A:N

AI Score

6.6

Confidence

Low

EPSS

0.001

Percentile

49.7%

JSON

Related for CVE-2012-2283