Iomega

Records7All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical1CVSS 9.0–10.0

CVSS high2CVSS 7.0–8.9

Exploited now

Iomega records in CISA KEV

No Iomega vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Home Media Network Hard Drive 1 record LOW Iconnect 1 record LOW Jazip 1 record LOW Nas 1 record LOW Nas A300u Firmware 1 record LOW Network Attached Storage 1 record LOW Storcenter 1 record LOW Storcenter Pro Firmware 1 record MEDIUM

Records

1 record in Storcenter Pro Firmware · all components

TI-2009-02257 CVE-2009-2367 · GHSA-2pm2-v5jq-cp26

cgi-bin/makecgi-pro in Iomega StorCenter Pro generates predictable session IDs, which…

MEDIUM 62

cgi-bin/makecgi-pro in Iomega StorCenter Pro generates predictable session IDs, which allows remote attackers to hijack active sessions and gain privileges via brute force guessing attacks on the session_id parameter.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.23195 Published 2009-07-08 No fix listed CWE-338

Open these records in search →

Critical	1
High	2
Medium	4
Low	0
No CVSS	0