CVE:CVE-2019-6178
CNNVD:CNNVD-201908-1252
LenovoEMC px12-350r等都是LenovoEMC公司的一款网络存储设备。
LenovoEMC NAS设备中存在信息泄露漏洞。攻击者可利用该漏洞泄露设备的详细信息。以下产品及版本受到影响：px12-350r 4.0.24.34808版本；ix12-300r 4.0.24.34808版本；HMNHD (Home Media Network Hard Drive) (Cloud Editiond) 3.2.16.30221版本；StorCenter ix2-200 (Cloud Editiond)3.2.16.30221版本；StorCenter ix4-200d (Cloud Edition) 3.2.16.30221版本；StorCenter ix2-200 2.1.50.30227版本；StorCenter ix4-200d 2.1.50.30227版本；StorCenter ix4-200rl 2.1.50.30227版本。
solution:Upgrade lenovo px12-350r_firmware to a higher version than 4.0.24.34808,and avoid the version 4.0.24.34808; Upgrade lenovo ix12-300r_firmware to a higher version than 4.0.24.34808,and avoid the version 4.0.24.34808; Upgrade lenovo home_media_network_hard_drive_firmware to a higher version than 3.2.16.30221,and avoid the version 3.2.16.30221; Upgrade lenovo storecenter_ix2-200_firmware to a higher version than 3.2.16.30221,2.1.50.30227,and avoid the version 3.2.16.30221,2.1.50.30227; Upgrade lenovo storecenter_ix4-200d_firmware to a higher version than 3.2.16.30221,2.1.50.30227,and avoid the version 3.2.16.30221,2.1.50.30227; Upgrade lenovo storecenter_ix4-200rl_firmware to a higher version than 2.1.50.30227,and avoid the version 2.1.50.30227