Multiple Iomega Network Storage Devices Security Bypass Vulnerability

Bugtraq ID:	54898
Class:	Design Error
CVE:	CVE-2012-2283
Remote:	No
Local:	Yes
Published:	Aug 08 2012 12:00AM
Updated:	Aug 08 2012 12:00AM
Credit:	EMC Product Security Response Center
Vulnerable:
Not Vulnerable:

Multiple Iomega Network Storage Devices Security Bypass Vulnerability

Multiple Iomega network storage devices are prone to a security-bypass vulnerability.

Successful exploits will allow attackers to bypass certain security restrictions and gain unauthorized access to remote shares.

The following devices are vulnerable:
Home Media Network Hard Drive
iConnect
StorCenter

Multiple Iomega Network Storage Devices Security Bypass Vulnerability

Attackers can exploit this issue using readily available tools.

Multiple Iomega Network Storage Devices Security Bypass Vulnerability

Solution:
Updates are available. Please see the reference for more details.

Multiple Iomega Network Storage Devices Security Bypass Vulnerability

References:

• Iomega Homepage (Iomega)
  
• ESA-2012-031: Iomega StorCenter/EMC Lifeline Remote Access Vulnerability ([email protected])