CVE-2015-8108
First published: Fri Apr 08 2016(Updated: )
The management interface in LenovoEMC EZ Media & Backup (hm3), ix2/ix2-dl, ix4-300d, px12-400r/450r, px6-300d, px2-300d, px4-300r, px4-400d, px4-400r, and px4-300d NAS devices with firmware before 4.1.204.33661 allows remote attackers to obtain sensitive device information via unspecified vectors.
Credit: cve@mitre.org
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Lenovo EMC Firmware | =4.1.204.33661 | |
| Lenovo EMC EZ Media & Backup (hm3) | ||
| Lenovo EMC ix2/ix2-dl | ||
| Lenovo EMC ix4-300d | ||
| Lenovo EMC px12-400r/450r | ||
| Lenovo px2-300d | ||
| Lenovo px4-300d firmware | ||
| Lenovo PX4-300R | ||
| Lenovo PX4-400D | ||
| Lenovo px4-400r | ||
| Lenovo PX6-300D Firmware |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
Frequently Asked Questions
What is the severity of CVE-2015-8108?
CVE-2015-8108 is classified as a high severity vulnerability due to its potential to expose sensitive device information to remote attackers.
How do I fix CVE-2015-8108?
To mitigate CVE-2015-8108, upgrade the firmware of affected LenovoEMC NAS devices to version 4.1.204.33661 or later.
Which devices are affected by CVE-2015-8108?
CVE-2015-8108 affects various LenovoEMC NAS devices, including ix2, ix4-300d, and px12-400r among others, running firmware versions prior to 4.1.204.33661.
What type of information can be exposed through CVE-2015-8108?
CVE-2015-8108 allows remote attackers to obtain sensitive device information, which could lead to further exploitation.
Is there a workaround for CVE-2015-8108 before updating firmware?
There are no official workarounds for CVE-2015-8108 other than applying the firmware update to eliminate the vulnerability.
- agent/type
- collector/mitre-cve
- source/MITRE
- agent/references
- agent/last-modified-date
- agent/severity
- agent/author
- agent/weakness
- agent/description
- agent/event
- agent/first-publish-date
- agent/source
- agent/tags
- agent/softwarecombine
- collector/nvd-index
- agent/software-canonical-lookup-request
- vendor/lenovo
- canonical/lenovo emc firmware
- version/lenovo emc firmware/4.1.204.33661
- canonical/lenovo emc ez media & backup (hm3)
- canonical/lenovo emc ix2/ix2-dl
- canonical/lenovo emc ix4-300d
- canonical/lenovo emc px12-400r/450r
- canonical/lenovo px2-300d
- canonical/lenovo px4-300d firmware
- canonical/lenovo px4-300r
- canonical/lenovo px4-400d
- canonical/lenovo px4-400r
- canonical/lenovo px6-300d firmware