← Database
CVE-2021-42852
HIGH
CVSS: 8.0
Published: 2022-05-18
Modified: 2026-06-17
Description
A command injection vulnerability was reported in some Lenovo Personal Cloud Storage devices that could allow an authenticated user to execute operating system commands by sending a crafted packet to the device.
Affected Platforms
Lenovo A1 FirmwareLenovo T2 FirmwareLenovo X1Lenovo T2Pro FirmwareLenovo A1Lenovo T1 FirmwareLenovo T2ProLenovo T1Lenovo T2Lenovo X1 Firmware
Weakness Type
CWE-78, CWE-78