VYPR
← All advisories
High severity8.8NVD Advisory· Published May 18, 2022· Updated Jun 17, 2026

CVE-2021-42850

CVE-2021-42850

Description

A weak default administrator password for the web interface and serial port was reported in some Lenovo Personal Cloud Storage devices that could allow unauthorized device access to an attacker with physical or local network access.

Affected products

11
  • Lenovo/A1 Firmware
    cpe:2.3:o:lenovo:a1_firmware:*:*:*:*:*:*:*:*
    Range: <5.3.6.a1
  • Lenovo/T1 Firmware
    cpe:2.3:o:lenovo:t1_firmware:*:*:*:*:*:*:*:*
    Range: <5.3.6.t1
  • Lenovo/T2 Firmware
    cpe:2.3:o:lenovo:t2_firmware:*:*:*:*:*:*:*:*
    Range: <5.3.8.t2
  • Lenovo/T2pro Firmware
    cpe:2.3:o:lenovo:t2pro_firmware:*:*:*:*:*:*:*:*
    Range: <5.3.7.t2-pro
  • Lenovo/X1 Firmware
    cpe:2.3:o:lenovo:x1_firmware:*:*:*:*:*:*:*:*
    Range: <5.3.8.x1
  • Lenovo/Personal Cloud Storagellm-fuzzy6 versions
    (expand)+ 5 more
    • (no CPE)
    • (no CPE)range: unspecified
    • (no CPE)range: unspecified
    • (no CPE)range: unspecified
    • (no CPE)range: unspecified
    • (no CPE)range: unspecified

Patches

Vulnerability mechanics

References

1

News mentions

0

No linked articles in our index yet.