CVE-2002-1955: Iomega NAS

Medium severity, CVSS 5.0. EPSS: 1.3% chance of exploitation in the next 30 days.

Iomega NAS A300U uses cleartext LANMAN authentication when mounting CIFS/SMB drives, which allows remote attackers to perform a man-in-the-middle attack.

Affected products

• Iomega NAS: version a300u only

Published 2002-12-31. Last modified 2026-06-16.