Vulnerabilities > Iomega

DATE CVE VULNERABILITY TITLE RISK
2009-07-08 CVE-2009-2367 Use of Cryptographically Weak Pseudo-Random Number Generator (PRNG) vulnerability in Iomega Storcenter PRO Firmware
cgi-bin/makecgi-pro in Iomega StorCenter Pro generates predictable session IDs, which allows remote attackers to hijack active sessions and gain privileges via brute force guessing attacks on the session_id parameter.
network
low complexity
iomega CWE-338
critical
9.8
2002-12-31 CVE-2002-1949 Cleartext Transmission of Sensitive Information vulnerability in Iomega NAS A300U Firmware
The Network Attached Storage (NAS) Administration Web Page for Iomega NAS A300U transmits passwords in cleartext, which allows remote attackers to sniff the administrative password.
network
low complexity
iomega CWE-319
7.5