CVE-2015-8108 - Vulnerability Details - OpenCVE

The management interface in LenovoEMC EZ Media & Backup (hm3), ix2/ix2-dl, ix4-300d, px12-400r/450r, px6-300d, px2-300d, px4-300r, px4-400d, px4-400r, and px4-300d NAS devices with firmware before 4.1.204.33661 allows remote attackers to obtain sensitive device information via unspecified vectors.

No CVSS v4.0

No CVSS v3.1

Attack Vector Network

Attack Complexity Low

Privileges Required None

Scope Unchanged

Confidentiality Impact Low

Integrity Impact None

Availability Impact None

User Interaction None

Access Vector Network

Access Complexity Low

Authentication None

Confidentiality Impact Partial

Integrity Impact None

Availability Impact None

This CVE is not in the KEV list.

Key SSVC decision points have not yet been added.

Vendors	Products
Lenovo	Emc Ez Media \& Backup \(hm3\) Emc Firmware Emc Ix2\/ix2-dl Emc Ix4-300d \(inc Dl\) Emc Px12-400r\/450r Emc Px2-300d Emc Px4-300d Emc Px4-300r Emc Px4-400d Emc Px4-400r Emc Px6-300d

Configuration 1 [-]

AND

cpe:2.3:a:lenovo:emc_firmware:4.1.204.33661:*:*:*:*:*:*:*

OR	cpe:2.3:h:lenovo:emc_ez_media_\&_backup_\(hm3\):-:::::::*
	cpe:2.3:h:lenovo:emc_ix2\/ix2-dl:-:::::::*
	cpe:2.3:h:lenovo:emc_ix4-300d_\(inc_dl\):-:::::::*
	cpe:2.3:h:lenovo:emc_px12-400r\/450r:-:::::::*
	cpe:2.3:h:lenovo:emc_px2-300d:-:::::::*
	cpe:2.3:h:lenovo:emc_px4-300d:-:::::::*
	cpe:2.3:h:lenovo:emc_px4-300r:-:::::::*
	cpe:2.3:h:lenovo:emc_px4-400d:-:::::::*
	cpe:2.3:h:lenovo:emc_px4-400r:-:::::::*
	cpe:2.3:h:lenovo:emc_px6-300d:-:::::::*

No data.

References

Link	Providers
https://support.lenovo.com/us/en/product_security/len_3846

History

Mon, 14 Jul 2025 13:45:00 +0000

Type	Values Removed	Values Added
Metrics	epss `{'score': 0.00392}`	epss `{'score': 0.0023}`

MITRE

Status: PUBLISHED

Assigner: mitre

Published: 2016-04-08T16:00:00

Updated: 2024-08-06T08:13:30.953Z

Reserved: 2015-11-11T00:00:00

Link: CVE-2015-8108

Vulnrichment

No data.

NVD

Status : Deferred

Published: 2016-04-12T01:59:25.160

Modified: 2025-04-12T10:46:40.837

Link: CVE-2015-8108

Redhat

No data.

{"containers": {"cna": {"affected": [{"product": "n/a", "vendor": "n/a", "versions": [{"status": "affected", "version": "n/a"}]}], "datePublic": "2016-03-10T00:00:00", "descriptions": [{"lang": "en", "value": "The management interface in LenovoEMC EZ Media & Backup (hm3), ix2/ix2-dl, ix4-300d, px12-400r/450r, px6-300d, px2-300d, px4-300r, px4-400d, px4-400r, and px4-300d NAS devices with firmware before 4.1.204.33661 allows remote attackers to obtain sensitive device information via unspecified vectors."}], "problemTypes": [{"descriptions": [{"description": "n/a", "lang": "en", "type": "text"}]}], "providerMetadata": {"dateUpdated": "2016-04-08T15:57:01", "orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca", "shortName": "mitre"}, "references": [{"tags": ["x_refsource_CONFIRM"], "url": "https://support.lenovo.com/us/en/product_security/len_3846"}], "x_legacyV4Record": {"CVE_data_meta": {"ASSIGNER": "cve@mitre.org", "ID": "CVE-2015-8108", "STATE": "PUBLIC"}, "affects": {"vendor": {"vendor_data": [{"product": {"product_data": [{"product_name": "n/a", "version": {"version_data": [{"version_value": "n/a"}]}}]}, "vendor_name": "n/a"}]}}, "data_format": "MITRE", "data_type": "CVE", "data_version": "4.0", "description": {"description_data": [{"lang": "eng", "value": "The management interface in LenovoEMC EZ Media & Backup (hm3), ix2/ix2-dl, ix4-300d, px12-400r/450r, px6-300d, px2-300d, px4-300r, px4-400d, px4-400r, and px4-300d NAS devices with firmware before 4.1.204.33661 allows remote attackers to obtain sensitive device information via unspecified vectors."}]}, "problemtype": {"problemtype_data": [{"description": [{"lang": "eng", "value": "n/a"}]}]}, "references": {"reference_data": [{"name": "https://support.lenovo.com/us/en/product_security/len_3846", "refsource": "CONFIRM", "url": "https://support.lenovo.com/us/en/product_security/len_3846"}]}}}, "adp": [{"providerMetadata": {"orgId": "af854a3a-2127-422b-91ae-364da2661108", "shortName": "CVE", "dateUpdated": "2024-08-06T08:13:30.953Z"}, "title": "CVE Program Container", "references": [{"tags": ["x_refsource_CONFIRM", "x_transferred"], "url": "https://support.lenovo.com/us/en/product_security/len_3846"}]}]}, "cveMetadata": {"assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca", "assignerShortName": "mitre", "cveId": "CVE-2015-8108", "datePublished": "2016-04-08T16:00:00", "dateReserved": "2015-11-11T00:00:00", "dateUpdated": "2024-08-06T08:13:30.953Z", "state": "PUBLISHED"}, "dataType": "CVE_RECORD", "dataVersion": "5.1"}

{"configurations": [{"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:a:lenovo:emc_firmware:4.1.204.33661:*:*:*:*:*:*:*", "matchCriteriaId": "CA7D8F99-65F6-454C-BEF5-D619007E712A", "vulnerable": true}], "negate": false, "operator": "OR"}, {"cpeMatch": [{"criteria": "cpe:2.3:h:lenovo:emc_ez_media_\\&_backup_\\(hm3\\):-:*:*:*:*:*:*:*", "matchCriteriaId": "FEAD1158-A066-4490-B39A-F6623F2674C8", "vulnerable": false}, {"criteria": "cpe:2.3:h:lenovo:emc_ix2\\/ix2-dl:-:*:*:*:*:*:*:*", "matchCriteriaId": "F1BF51FD-5561-4AD3-A0EB-B15D3205E259", "vulnerable": false}, {"criteria": "cpe:2.3:h:lenovo:emc_ix4-300d_\\(inc_dl\\):-:*:*:*:*:*:*:*", "matchCriteriaId": "87D7A2AB-1E0D-4551-AA87-CA59768A3CB7", "vulnerable": false}, {"criteria": "cpe:2.3:h:lenovo:emc_px12-400r\\/450r:-:*:*:*:*:*:*:*", "matchCriteriaId": "C4DFA8E5-6398-4C0E-9028-9BC7315DA6AE", "vulnerable": false}, {"criteria": "cpe:2.3:h:lenovo:emc_px2-300d:-:*:*:*:*:*:*:*", "matchCriteriaId": "10BF8F59-83EF-472A-854C-91B99F49945C", "vulnerable": false}, {"criteria": "cpe:2.3:h:lenovo:emc_px4-300d:-:*:*:*:*:*:*:*", "matchCriteriaId": "D592F80E-F531-46E6-8D95-62EF9909AE3D", "vulnerable": false}, {"criteria": "cpe:2.3:h:lenovo:emc_px4-300r:-:*:*:*:*:*:*:*", "matchCriteriaId": "99A24BDF-3D2D-4038-ACEF-B75A141FFF75", "vulnerable": false}, {"criteria": "cpe:2.3:h:lenovo:emc_px4-400d:-:*:*:*:*:*:*:*", "matchCriteriaId": "D842ECFE-E141-4623-A9D6-C74502167270", "vulnerable": false}, {"criteria": "cpe:2.3:h:lenovo:emc_px4-400r:-:*:*:*:*:*:*:*", "matchCriteriaId": "0733ED12-467A-484F-949A-E963C4C586E3", "vulnerable": false}, {"criteria": "cpe:2.3:h:lenovo:emc_px6-300d:-:*:*:*:*:*:*:*", "matchCriteriaId": "82AC7528-B18B-447E-9ADC-37CB0593184F", "vulnerable": false}], "negate": false, "operator": "OR"}], "operator": "AND"}], "cveTags": [], "descriptions": [{"lang": "en", "value": "The management interface in LenovoEMC EZ Media & Backup (hm3), ix2/ix2-dl, ix4-300d, px12-400r/450r, px6-300d, px2-300d, px4-300r, px4-400d, px4-400r, and px4-300d NAS devices with firmware before 4.1.204.33661 allows remote attackers to obtain sensitive device information via unspecified vectors."}, {"lang": "es", "value": "La interfaz de gesti\u00f3n en dispositivos NAS LenovoEMC EZ Media & Backup (hm3), ix2/ix2-dl, ix4-300d, px12-400r/450r, px6-300d, px2-300d, px4-300r, px4-400d, px4-400r y px4-300d con firmware en versiones anteriores a 4.1.204.33661 permite a atacantes remotos obtener informaci\u00f3n sensible del dispositivo a trav\u00e9s de vectores no especificados."}], "id": "CVE-2015-8108", "lastModified": "2025-04-12T10:46:40.837", "metrics": {"cvssMetricV2": [{"acInsufInfo": false, "baseSeverity": "MEDIUM", "cvssData": {"accessComplexity": "LOW", "accessVector": "NETWORK", "authentication": "NONE", "availabilityImpact": "NONE", "baseScore": 5.0, "confidentialityImpact": "PARTIAL", "integrityImpact": "NONE", "vectorString": "AV:N/AC:L/Au:N/C:P/I:N/A:N", "version": "2.0"}, "exploitabilityScore": 10.0, "impactScore": 2.9, "obtainAllPrivilege": false, "obtainOtherPrivilege": false, "obtainUserPrivilege": false, "source": "nvd@nist.gov", "type": "Primary"}], "cvssMetricV30": [{"cvssData": {"attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "NONE", "baseScore": 5.3, "baseSeverity": "MEDIUM", "confidentialityImpact": "LOW", "integrityImpact": "NONE", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N", "version": "3.0"}, "exploitabilityScore": 3.9, "impactScore": 1.4, "source": "nvd@nist.gov", "type": "Primary"}]}, "published": "2016-04-12T01:59:25.160", "references": [{"source": "cve@mitre.org", "tags": ["Vendor Advisory"], "url": "https://support.lenovo.com/us/en/product_security/len_3846"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "tags": ["Vendor Advisory"], "url": "https://support.lenovo.com/us/en/product_security/len_3846"}], "sourceIdentifier": "cve@mitre.org", "vulnStatus": "Deferred", "weaknesses": [{"description": [{"lang": "en", "value": "CWE-254"}], "source": "nvd@nist.gov", "type": "Primary"}]}