CVE-2021-42850

State: Published
Severity: 8.8 High
Published: May 18, 2022
Updated: Aug 4, 2024
Reserved: Oct 22, 2021

Description

A weak default administrator password for the web interface and serial port was reported in some Lenovo Personal Cloud Storage devices that could allow unauthorized device access to an attacker with physical or local network access.

Scores

CVSS	Score	Vector	Source
3.1	8.8 High	CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H	lenovo

Weaknesses

CWE-798 Use of Hard-coded Credentials

Affected Products

Product	Versions
Personal Cloud Storage A1Lenovo	before 5.3.6.a1Affected
Personal Cloud Storage T1Lenovo	before 5.3.6.t1Affected
Personal Cloud Storage X1Lenovo	before 5.3.8.x1Affected
Personal Cloud Storage T2Lenovo	before 5.3.8.t2Affected
Personal Cloud Storage T2ProLenovo	before 5.3.7.t2-proAffected

References

https://iknow.lenovo.com.cn/detail/dc_200017.html

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.