medium4.3
CVE-2021-42848
An information disclosure vulnerability was reported in some Lenovo Personal Cloud Storage devices that could allow an unauthenticated user to retrieve device …
Impact
An information disclosure vulnerability was reported in some Lenovo Personal Cloud Storage devices that could allow an unauthenticated user to retrieve device and networking details.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Lenovo | A1 Firmware | before 5.3.6.a1 |
| Lenovo | T1 Firmware | before 5.3.6.t1 |
| Lenovo | X1 Firmware | before 5.3.8.x1 |
| Lenovo | T2 Firmware | before 5.3.8.t2 |
| Lenovo | T2pro Firmware | before 5.3.7.t2-pro |