iomega records
7 published records for vendor iomega.
Researcher profile
- Entered KEV
- 0 · 0%
- Weaponized
- 1 · 14.3%
- Pre-auth RCE
- 0
- With a fix record
- 0%
- Median publish → KEV
- No record has entered KEV
Records by year
Bar: total · dark part: CISA KEV.
Recurring classes
- CWE-319 Cleartext Transmission of Sensitive Information1
- CWE-338 Use of Cryptographically Weak Pseudo-Random Number Generator (PRNG)1
The weakness classes this vendor ships most often: where to look.
CWEAttack profile
All records
7 records| Action | CVE | Vulnerability | Severity | KEV | EPSS | Published |
|---|---|---|---|---|---|---|
60This week | CVE-2009-2367Weaponized | cgi-bin/makecgi-pro in Iomega StorCenter Pro generates predictable session IDs, which allows remote attackers to hijack active sessions and iomega · storcenter pro firmware · CWE-338 | Critical9.8 | — | 23.1% | Jul 8, 2009 |
30Monitor | CVE-2002-1949No exploit | The Network Attached Storage (NAS) Administration Web Page for Iomega NAS A300U transmits passwords in cleartext, which allows remote attackiomega · nas a300u firmware · CWE-319 | High7.5 | — | 1.2% | Dec 31, 2002 |
28Monitor | CVE-2001-0110Proof of concept | Buffer overflow in jaZip Zip/Jaz drive manager allows local users to gain root privileges via a long DISPLAY environmental variable.iomega · jazip | High7.2 | — | 1.0% | Mar 12, 2001 |
22Monitor | CVE-2012-2283No exploit | The Iomega Home Media Network Hard Drive with EMC Lifeline firmware before 2.104, Home Media Network Hard Drive Cloud Edition with EMC Lifelemc · lifeline | Medium5.5 | — | 0.9% | Aug 16, 2012 |
20Monitor | CVE-2002-1955No exploit | Iomega NAS A300U uses cleartext LANMAN authentication when mounting CIFS/SMB drives, which allows remote attackers to perform a man-in-the-miomega · nas | Medium5.0 | — | 1.3% | Dec 31, 2002 |
18Monitor | CVE-1999-1174No exploit | ZIP drive for Iomega ZIP-100 disks allows attackers with physical access to the drive to bypass password protection by inserting a known disiomega · zip 100 mb drive | Medium4.6 | — | 0.3% | Dec 21, 2001 |
18Monitor | CVE-2002-1863No exploit | Iomega Network Attached Storage (NAS) A300U, and possibly other models, does not allow the FTP service to be disabled, which allows local usiomega · network attached storage | Medium4.6 | — | 0.3% | Dec 31, 2002 |
- CVE-2009-236760This week
cgi-bin/makecgi-pro in Iomega StorCenter Pro generates predictable session IDs, which allows remote attackers to hijack active sessions and
CriticalCVSS 9.8WeaponizedEPSS 23%iomega · storcenter pro firmwareJul 8, 2009
- CVE-2002-194930Monitor
The Network Attached Storage (NAS) Administration Web Page for Iomega NAS A300U transmits passwords in cleartext, which allows remote attack
HighCVSS 7.5No exploitEPSS 1%iomega · nas a300u firmwareDec 31, 2002
- CVE-2001-011028Monitor
Buffer overflow in jaZip Zip/Jaz drive manager allows local users to gain root privileges via a long DISPLAY environmental variable.
HighCVSS 7.2Proof of conceptEPSS 1%iomega · jazipMar 12, 2001
- CVE-2012-228322Monitor
The Iomega Home Media Network Hard Drive with EMC Lifeline firmware before 2.104, Home Media Network Hard Drive Cloud Edition with EMC Lifel
MediumCVSS 5.5No exploitEPSS 0%emc · lifelineAug 16, 2012
- CVE-2002-195520Monitor
Iomega NAS A300U uses cleartext LANMAN authentication when mounting CIFS/SMB drives, which allows remote attackers to perform a man-in-the-m
MediumCVSS 5.0No exploitEPSS 1%iomega · nasDec 31, 2002
- CVE-1999-117418Monitor
ZIP drive for Iomega ZIP-100 disks allows attackers with physical access to the drive to bypass password protection by inserting a known dis
MediumCVSS 4.6No exploitEPSS 0%iomega · zip 100 mb driveDec 21, 2001
- CVE-2002-186318Monitor
Iomega Network Attached Storage (NAS) A300U, and possibly other models, does not allow the FTP service to be disabled, which allows local us
MediumCVSS 4.6No exploitEPSS 0%iomega · network attached storageDec 31, 2002