Advisories · Technology

Lenovo Personal Cloud Storage T2Pro.

Every CVE that names Lenovo Personal Cloud Storage T2Pro among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.

CVE-2021-42852 CVE record

CVSS 8.0 High

OS command injection in Lenovo Personal Cloud Storage A1 and others
- Lenovo Personal Cloud Storage A1
- Lenovo Personal Cloud Storage T1
- Command injection
Not analysed yet 18 May 2022
CVE-2021-42851 CVE record

CVSS 6.3 Medium

Missing authorization in Lenovo Personal Cloud Storage A1 and others
- Lenovo Personal Cloud Storage A1
- Lenovo Personal Cloud Storage T1
- Broken access control
Not analysed yet 18 May 2022
CVE-2021-42850 CVE record

CVSS 8.8 High

Hard-coded credentials in Lenovo Personal Cloud Storage A1 and others
- Lenovo Personal Cloud Storage A1
- Lenovo Personal Cloud Storage T1
- Hard-coded credentials
Not analysed yet 18 May 2022
CVE-2021-42849 CVE record

CVSS 6.8 Medium

Hard-coded credentials in Lenovo Personal Cloud Storage A1 and others
- Lenovo Personal Cloud Storage A1
- Lenovo Personal Cloud Storage T1
- Hard-coded credentials
Not analysed yet 18 May 2022
CVE-2021-42848 CVE record

CVSS 4.3 Medium

Missing authorization in Lenovo Personal Cloud Storage A1 and others
- Lenovo Personal Cloud Storage A1
- Lenovo Personal Cloud Storage T1
- Broken access control
Not analysed yet 18 May 2022