1. Home
  2. CVE Database
  3. CVE-2021-42850
HIGH · 8.8

CVE-2021-42850

A weak default administrator password for the web interface and serial port was reported in some Lenovo Personal Cloud Storage devices that could allow unauthorized device access to an attacker with p...

Vulnerability Description

A weak default administrator password for the web interface and serial port was reported in some Lenovo Personal Cloud Storage devices that could allow unauthorized device access to an attacker with physical or local network access.

CVSS Score

8.8

HIGH

CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Attack Vector
ADJACENT_NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality
HIGH
Integrity
HIGH
Availability
HIGH

Affected Products

VendorProductVersions
LenovoA1 Firmware< 5.3.6.a1
LenovoA1-
LenovoT1 Firmware< 5.3.6.t1
LenovoT1-
LenovoX1 Firmware< 5.3.8.x1
LenovoX1-
LenovoT2 Firmware< 5.3.8.t2
LenovoT2-
LenovoT2Pro Firmware< 5.3.7.t2-pro
LenovoT2Pro-

Related Weaknesses (CWE)

CWE-798

References

FAQ

What is CVE-2021-42850?

CVE-2021-42850 is a vulnerability with a CVSS score of 8.8 (HIGH). A weak default administrator password for the web interface and serial port was reported in some Lenovo Personal Cloud Storage devices that could allow unauthorized device access to an attacker with p...

How severe is CVE-2021-42850?

CVE-2021-42850 has been rated HIGH with a CVSS base score of 8.8/10. Review the CVSS metrics above for detailed severity breakdown.

Is there a patch for CVE-2021-42850?

Check the references section above for vendor advisories and patch information. Affected products include: Lenovo A1 Firmware, Lenovo A1, Lenovo T1 Firmware, Lenovo T1, Lenovo X1 Firmware.