CVE:CVE-2018-9080
CNNVD:CNNVD-201809-1179
Lenovo Iomega StorCenter px12-450r等都是中国联想（Lenovo）公司的存储设备。
使用4.1.402.34662及之前版本固件的多款Lenovo产品中的Web UI存在安全漏洞，该漏洞源于用户在登录前将Iomega cookie设置成已知值时，NAS不会提供一个新cookie值。攻击者可利用该漏洞提升权限。以下产品受到影响：Lenovo Iomega StorCenter px12-450r，StorCenter px12-400r，StorCenter px4-300r，StorCenter px6-300d，StorCenter px4-300d，StorCenter px2-300d，StorCenter ix4-300d，StorCenter ix2/ix2-dl，EZ Media & Backup Center；LenovoEMC px12-450r，px12-400r，px4-400r，px4-300r，px6-300d，px4-400d，px4-300d，px2-300d；Lenovo ix4-300d，ix2，EZ Media & Backup Center。
solution:Upgrade lenovo storcenter_px12-450r_firmware to a higher version than 4.1.402.34662,and avoid the version 4.1.402.34662; Upgrade lenovo storcenter_px12-400r_firmware to a higher version than 4.1.402.34662,and avoid the version 4.1.402.34662; Upgrade lenovo storcenter_px4-300r_firmware to a higher version than 4.1.402.34662,and avoid the version 4.1.402.34662; Upgrade lenovo storcenter_px6-300d_firmware to a higher version than 4.1.402.34662,and avoid the version 4.1.402.34662; Upgrade lenovo storcenter_px4-300d_firmware to a higher version than 4.1.402.34662,and avoid the version 4.1.402.34662; Upgrade lenovo storcenter_px2-300d_firmware to a higher version than 4.1.402.34662,and avoid the version 4.1.402.34662; Upgrade lenovo storcenter_ix4-300d_firmware to a higher version than 4.1.402.34662,and avoid the version 4.1.402.34662; Upgrade lenovo storcenter_ix2_firmware to a higher version than 4.1.402.34662,and avoid the version 4.1.402.34662; Upgrade lenovo storcenter_ix2-dl_firmware to a higher version than 4.1.402.34662,and avoid the version 4.1.402.34662; Upgrade lenovo ez_media_&_backup_center_firmware to a higher version than 4.1.402.34662,and avoid the version 4.1.402.34662; Upgrade lenovo px12-450r_firmware to a higher version than 4.1.402.34662,and avoid the version 4.1.402.34662; Upgrade lenovo px12-400r_firmware to a higher version than 4.1.402.34662,and avoid the version 4.1.402.34662; Upgrade lenovo px4-400r_firmware to a higher version than 4.1.402.34662,and avoid the version 4.1.402.34662; Upgrade lenovo px4-300r_firmware to a higher version than 4.1.402.34662,and avoid the version 4.1.402.34662; Upgrade lenovo px6-300d_firmware to a higher version than 4.1.402.34662,and avoid the version 4.1.402.34662; Upgrade lenovo px4-400d_firmware to a higher version than 4.1.402.34662,and avoid the version 4.1.402.34662; Upgrade lenovo px4-300d_firmware to a higher version than 4.1.402.34662,and avoid the version 4.1.402.34662; Upgrade lenovo px2-300d_firmware to a higher version than 4.1.402.34662,and avoid the version 4.1.402.34662; Upgrade lenovo ix4-300d_firmware to a higher version than 4.1.402.34662,and avoid the version 4.1.402.34662; Upgrade lenovo ix2_firmware to a higher version than 4.1.402.34662,and avoid the version 4.1.402.34662