Lenovo Personal Cloud Storage T2 vulnerabilities
5 vulnerabilities
Known vulnerabilities in Lenovo Personal Cloud Storage T2, newest first, with CVSS severity, EPSS, KEV listings, ransomware use and the affected versions.
HighCVE-2021-42850lenovo · a1_firmware +9 morelenovo a1_firmwareA weak default administrator password for the web interface and serial port was reported in some Lenovo Personal Cloud Storage devices that could allow unauthorized device access to an attacker with physical or local network access.EPSS0.24%MediumCVE-2021-42848lenovo · a1_firmware +9 morelenovo a1_firmwareAn information disclosure vulnerability was reported in some Lenovo Personal Cloud Storage devices that could allow an unauthenticated user to retrieve device and networking details.EPSS0.75%MediumCVE-2021-42851lenovo · a1_firmware +9 morelenovo a1_firmwareA vulnerability was reported in some Lenovo Personal Cloud Storage devices that could allow an unauthenticated user to create a standard user account.EPSS0.60%HighCVE-2021-42852lenovo · a1_firmware +9 morelenovo a1_firmwareA command injection vulnerability was reported in some Lenovo Personal Cloud Storage devices that could allow an authenticated user to execute operating system commands by sending a crafted packet to the device.EPSS0.78%MediumCVE-2021-42849lenovo · a1_firmware +9 morelenovo a1_firmwareA weak default password for the serial port was reported in some Lenovo Personal Cloud Storage devices that could allow unauthorized device access to an attacker with physical access.EPSS0.23%