1. Home
  2. CVE Database
  3. CVE-2021-42848
MEDIUM · 4.3

CVE-2021-42848

An information disclosure vulnerability was reported in some Lenovo Personal Cloud Storage devices that could allow an unauthenticated user to retrieve device and networking details.

Vulnerability Description

An information disclosure vulnerability was reported in some Lenovo Personal Cloud Storage devices that could allow an unauthenticated user to retrieve device and networking details.

CVSS Score

4.3

MEDIUM

CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
Attack Vector
ADJACENT_NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality
LOW
Integrity
NONE
Availability
NONE

Affected Products

VendorProductVersions
LenovoA1 Firmware< 5.3.6.a1
LenovoA1-
LenovoT1 Firmware< 5.3.6.t1
LenovoT1-
LenovoX1 Firmware< 5.3.8.x1
LenovoX1-
LenovoT2 Firmware< 5.3.8.t2
LenovoT2-
LenovoT2Pro Firmware< 5.3.7.t2-pro
LenovoT2Pro-

Related Weaknesses (CWE)

CWE-862

References

FAQ

What is CVE-2021-42848?

CVE-2021-42848 is a vulnerability with a CVSS score of 4.3 (MEDIUM). An information disclosure vulnerability was reported in some Lenovo Personal Cloud Storage devices that could allow an unauthenticated user to retrieve device and networking details.

How severe is CVE-2021-42848?

CVE-2021-42848 has been rated MEDIUM with a CVSS base score of 4.3/10. Review the CVSS metrics above for detailed severity breakdown.

Is there a patch for CVE-2021-42848?

Check the references section above for vendor advisories and patch information. Affected products include: Lenovo A1 Firmware, Lenovo A1, Lenovo T1 Firmware, Lenovo T1, Lenovo X1 Firmware.