CVE:CVE-2019-6160
CNNVD:CNNVD-201907-818
Lenovo px12-350r等都是中国联想（Lenovo）公司的一款网络存储设备。
多款Lenovo产品中存在安全漏洞。攻击者可借助API利用该漏洞访问NAS共享区上的文件。以下产品及版本受到影响：Lenovo px12-350r 4.0.24.34808版本；ix12-300r 4.0.24.34808版本；HMNHD (Home Media Network Hard Drive) Cloud Editiond 3.2.16.30221版本；StorCenter ix2-200 Cloud Edition 3.2.16.30221版本；StorCenter ix4-200d Cloud Edition 3.2.16.30221版本；StorCenter ix2-200 2.1.50.30227版本；StorCenter ix4-200d 2.1.50.30227版本；StorCenter ix4-200rl 2.1.50.30227版本。
solution:Upgrade lenovo px12-350r_firmware to a higher version than 4.0.24.34808,and avoid the version (,4.0.24.34808); Upgrade lenovo ix12-300r_firmware to a higher version than 4.0.24.34808,and avoid the version (,4.0.24.34808); Upgrade lenovo home_media_network_hard_drive_firmware to a higher version than 3.2.16.30221,and avoid the version (,3.2.16.30221); Upgrade lenovo storcenter_ix2-200_firmware to a higher version than 3.2.16.30221,2.1.50.30227,and avoid the version (,3.2.16.30221),(,2.1.50.30227); Upgrade lenovo storcenter_ix4-200d_firmware to a higher version than 3.2.16.30221,2.1.50.30227,and avoid the version (,3.2.16.30221),(,2.1.50.30227); Upgrade lenovo storcenter_ix4-200rl_firmware to a higher version than 2.1.50.30227,and avoid the version (,2.1.50.30227)