CVE-2009-2367: Iomega Storcenter Pro Firmware

Critical severity, CVSS 9.8. EPSS: 23.2% chance of exploitation in the next 30 days.

cgi-bin/makecgi-pro in Iomega StorCenter Pro generates predictable session IDs, which allows remote attackers to hijack active sessions and gain privileges via brute force guessing attacks on the session_id parameter.

Affected products

• Iomega Storcenter Pro Firmware: affected versions not specified

Published 2009-07-08. Last modified 2026-06-16.