CyberRota Analysis
This is a critical severity vulnerability with a CVSS score of 9.8. It affects Java.
CVE
CVE-2018-9079
Severity
CRITICAL
CVSS
9.8
EPSS
1.23%
Java
Original NVD Description
For some Iomega, Lenovo, LenovoEMC NAS devices versions 4.1.402.34662 and earlier, adversaries can craft URLs to modify the Document Object Model (DOM) of the page. In addition, adversaries can inject HTML script tags and HTML tags with JavaScript handlers to execute arbitrary JavaScript with the origin of the device.
Related CVEs
Other vulnerabilities affecting the same vendor(s)