title: Iomega and LenovoEMC NAS Web UI Vulnerabilities
description: For some Iomega, Lenovo, LenovoEMC NAS devices versions 4.1.402.34662 and earlier, when joining a PersonalCloud setup, an attacker can craft a command injection payload using backtick "``" characters in the client:password parameter. As a result, arbitrary commands may be executed as the root user. The attack requires a value __c and iomega parameter.
problem types: Arbitrary Command Execution
affected:
{
product: Iomega StorCenter
vendor: Lenovo Group LTD
versions:
lessThanOrEqual: 4.1.402.34662, status: affected, version: 4.1.402.34662, versionType: custom
}
{
product: LenovoEMC
vendor: Lenovo Group LTD
versions:
lessThanOrEqual: 4.1.402.34662, status: affected, version: 4.1.402.34662, versionType: custom
}
{
product: EZ Media and Backup Center
vendor: Lenovo Group LTD
versions:
lessThanOrEqual: 4.1.402.34662, status: affected, version: 4.1.402.34662, versionType: custom
}
