CVE-2019-19758

Severity: medium (CVSS 6.1 v3.1)
Exploited in the wild: not listed in CISA KEV
EPSS: 0.9% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2020-02-14 · updated 2026-06-17
Weakness: CWE-601

Description

A vulnerability in the web interface of Lenovo EZ Media & Backup Center, ix2 & ix2-dl version 4.1.406.34763 and prior could allow an unauthenticated, remote attacker to redirect a user to an untrusted web page.

Affected products

Lenovo Ez Media & Backup Center Ix2-Dl Firmware: through -4.1.406.34763
Lenovo Ez Media & Backup Center Ix2 Firmware: through 4.1.406.34763

References

https://support.lenovo.com/us/en/product_security/LEN-30242
https://support.lenovo.com/us/en/product_security/LEN-30242

Get alerted when CVE-2019-19758 or the next vulnerability affects your stack