← CVE Intelligence

CVE-2021-42852

Lenovo / Personal Cloud Storage A1 PUBLISHED

Description (CNA)

A command injection vulnerability was reported in some Lenovo Personal Cloud Storage devices that could allow an authenticated user to execute operating system commands by sending a crafted packet to the device.

Affected (CNA)

Vendor / productVersions
Lenovo / Personal Cloud Storage A1affected unspecified before 5.3.6.a1
Lenovo / Personal Cloud Storage T1affected unspecified before 5.3.6.t1
Lenovo / Personal Cloud Storage X1affected unspecified before 5.3.8.x1
Lenovo / Personal Cloud Storage T2affected unspecified before 5.3.8.t2
Lenovo / Personal Cloud Storage T2Proaffected unspecified before 5.3.7.t2-pro

CWE

CWE-78

References

ADP enrichment

CVE

No English description supplied.