medium6.8
CVE-2021-42849
A weak default password for the serial port was reported in some Lenovo Personal Cloud Storage devices that could allow unauthorized device access to an attack…
Impact
A weak default password for the serial port was reported in some Lenovo Personal Cloud Storage devices that could allow unauthorized device access to an attacker with physical access.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Lenovo | A1 Firmware | before 5.3.6.a1 |
| Lenovo | T1 Firmware | before 5.3.6.t1 |
| Lenovo | X1 Firmware | before 5.3.8.x1 |
| Lenovo | T2 Firmware | before 5.3.8.t2 |
| Lenovo | T2pro Firmware | before 5.3.7.t2-pro |