CVE-2015-8108: Medium severity lenovo emc firmware vulnerability

Published Apr 8, 2016

Updated

The management interface in LenovoEMC EZ Media & Backup (hm3), ix2/ix2-dl, ix4-300d, px12-400r/450r, px6-300d, px2-300d, px4-300r, px4-400d, px4-400r, and px4-300d NAS devices with firmware before 4.1.204.33661 allows remote attackers to obtain sensitive device information via unspecified vectors.

Affected Software

11 affected components

Lenovo Emc Firmware=4.1.204.33661

Lenovo Emc Ez Media \& Backup \(hm3\)

Lenovo Emc Ix2\/ix2-dl

Lenovo Emc Ix4-300d \(inc Dl\)

Lenovo Emc Px12-400r\/450r

Lenovo Emc Px2-300d

Lenovo Emc Px4-300d

Lenovo Emc Px4-300r

Lenovo Emc Px4-400d

Lenovo Emc Px4-400r

Lenovo Emc Px6-300d

Event History

Apr 8, 2016

CVE Published

via MITRE·04:00 PM

Data Sourced

via MITRE·04:00 PM

Description

Frequently Asked Questions

What is the severity of CVE-2015-8108?

CVE-2015-8108 is classified as a high severity vulnerability due to its potential to expose sensitive device information to remote attackers.

How do I fix CVE-2015-8108?

To mitigate CVE-2015-8108, upgrade the firmware of affected LenovoEMC NAS devices to version 4.1.204.33661 or later.

Which devices are affected by CVE-2015-8108?

CVE-2015-8108 affects various LenovoEMC NAS devices, including ix2, ix4-300d, and px12-400r among others, running firmware versions prior to 4.1.204.33661.

What type of information can be exposed through CVE-2015-8108?

CVE-2015-8108 allows remote attackers to obtain sensitive device information, which could lead to further exploitation.

Is there a workaround for CVE-2015-8108 before updating firmware?

There are no official workarounds for CVE-2015-8108 other than applying the firmware update to eliminate the vulnerability.