Skip to content
CVE PROGRAM SOURCE RECORD8.8 High

CVE-2021-42850

A weak default administrator password for the web interface and serial port was reported in some Lenovo Personal Cloud Storage devices that could allow unauthorized device access t

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
lenovo

Description

A weak default administrator password for the web interface and serial port was reported in some Lenovo Personal Cloud Storage devices that could allow unauthorized device access to an attacker with physical or local network access.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Lenovo Personal Cloud Storage A1

  • unspecified to < 5.3.6.a1affected

Lenovo Personal Cloud Storage T1

  • unspecified to < 5.3.6.t1affected

Lenovo Personal Cloud Storage X1

  • unspecified to < 5.3.8.x1affected

Lenovo Personal Cloud Storage T2

  • unspecified to < 5.3.8.t2affected

Lenovo Personal Cloud Storage T2Pro

  • unspecified to < 5.3.7.t2-proaffected

References