CVE-2021-42848

State: Published
Severity: 4.3 Medium
Published: May 18, 2022
Updated: Aug 4, 2024
Reserved: Oct 22, 2021

Description

An information disclosure vulnerability was reported in some Lenovo Personal Cloud Storage devices that could allow an unauthenticated user to retrieve device and networking details.

Scores

CVSS	Score	Vector	Source
3.1	4.3 Medium	CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N	lenovo

Weaknesses

CWE-862 Missing Authorization

Affected Products

Product	Versions
Personal Cloud Storage A1Lenovo	before 5.3.6.a1Affected
Personal Cloud Storage T1Lenovo	before 5.3.6.t1Affected
Personal Cloud Storage X1Lenovo	before 5.3.8.x1Affected
Personal Cloud Storage T2Lenovo	before 5.3.8.t2Affected
Personal Cloud Storage T2ProLenovo	before 5.3.7.t2-proAffected

References

https://iknow.lenovo.com.cn/detail/dc_200017.html

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.