Quantum Secular Labs / Blog / Advisories
CVE-2018-9079: In addition, adversaries can inject HTML script tags and HTML tags with JavaScript handlers to execute…
CVE-2018-9079 is rated critical with a CVSS v3.0 base score of 9.8 and NVD lists 20 affected products, including Lenovo Storcenter Px12 450r Firmware. Per its scoring, it can be exploited over the network, without authentication, without any user interaction. The scored impact on confidentiality, integrity and availability is the highest available.
Vulnerability description
For some Iomega, Lenovo, LenovoEMC NAS devices versions 4.1.402.34662 and earlier, adversaries can craft URLs to modify the Document Object Model (DOM) of the page. In addition, adversaries can inject HTML script tags and HTML tags with JavaScript handlers to execute arbitrary JavaScript with the origin of the device.
Severity breakdown
CVSS v3.0 9.8: CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
- Attack vector: Network. Exploitable remotely over the network, with no need for local or physical access.
- Attack complexity: Low. No special conditions; the attack can be repeated reliably.
- Privileges required: None. No account or prior access is needed.
- User interaction: None. No action from any user is needed.
- Scope: Unchanged. Impact stays within the vulnerable component.
- Confidentiality impact: High. Total loss of confidentiality; sensitive data can be fully disclosed.
- Integrity impact: High. Total loss of integrity; data or system state can be fully modified.
- Availability impact: High. Total loss of availability; the component can be shut down.
Underlying weakness
CWE-79: Improper Neutralization of Input During Web Page Generation
The product does not neutralize or incorrectly neutralizes user-controllable input before it is placed in output that is used as a web page that is served to other users.
Affected products
- Lenovo Storcenter Px12 450r Firmware: 4.1.402.34662
- Lenovo Storcenter Px12 400r Firmware: 4.1.402.34662
- Lenovo Storcenter Px4 300r Firmware: 4.1.402.34662
- Lenovo Storcenter Px6 300d Firmware: 4.1.402.34662
- Lenovo Storcenter Px4 300d Firmware: 4.1.402.34662
- Lenovo Storcenter Px2 300d Firmware: 4.1.402.34662
- Lenovo Storcenter Ix4 300d Firmware: 4.1.402.34662
- Lenovo Storcenter Ix2 Firmware: 4.1.402.34662
- Lenovo Storcenter Ix2 Dl Firmware: 4.1.402.34662
- Lenovo Ez Media & Backup Center Firmware: 4.1.402.34662
- Lenovo Px12 450r Firmware: 4.1.402.34662
- Lenovo Px12 400r Firmware: 4.1.402.34662
- Lenovo Px4 400r Firmware: 4.1.402.34662
- Lenovo Px4 300r Firmware: 4.1.402.34662
- Lenovo Px6 300d Firmware: 4.1.402.34662