CVE-2021-42850highCWE-798

CVE-2021-42850: high-severity vulnerability in Lenovo Personal Cloud Storage A1

Published · Updated

Follow this CVE+ Monitor Personal Cloud Storage A1+ Monitor Personal Cloud Storage T1

E-mail alert when it lands in KEV, gets a public PoC or its score goes up.

21Vexday Risk Score

No sign of exploitation. No public exploitation artifact known so far.

ssvc Trackcvss 8.8epss 0.2%
A weak default administrator password for the web interface and serial port was reported in some Lenovo Personal Cloud Storage devices that could allow unauthorized device access to an attacker with physical or local network access.
CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Affected products
Lenovo · Personal Cloud Storage A1Lenovo · Personal Cloud Storage T1Lenovo · Personal Cloud Storage T2Lenovo · Personal Cloud Storage T2ProLenovo · Personal Cloud Storage X1
Related CVEs — Lenovo Personal Cloud Storage A1

In the same product, most dangerous first.

CVE-2021-42852HIGHCVE-2021-42852EPSS 0.8%CVE-2021-42848MEDIUMCVE-2021-42848EPSS 0.8%CVE-2021-42851MEDIUMCVE-2021-42851EPSS 0.6%CVE-2021-42849MEDIUMCVE-2021-42849EPSS 0.2%