high8.0
CVE-2021-42852
A command injection vulnerability was reported in some Lenovo Personal Cloud Storage devices that could allow an authenticated user to execute operating system…
Impact
A command injection vulnerability was reported in some Lenovo Personal Cloud Storage devices that could allow an authenticated user to execute operating system commands by sending a crafted packet to the device.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Lenovo | A1 Firmware | before 5.3.6.a1 |
| Lenovo | T1 Firmware | before 5.3.6.t1 |
| Lenovo | X1 Firmware | before 5.3.8.x1 |
| Lenovo | T2 Firmware | before 5.3.8.t2 |
| Lenovo | T2pro Firmware | before 5.3.7.t2-pro |