CVE-2021-42848

CVSS 4.3 MEDIUMEPSS 0.7%CWE-862

Vexday Risk Score

13Low

SSVC decision (CISA)

Track

No exploitation signal → monitor

CVSS 4.3EPSS 0.7%KEV nãoPoC —Patch —

Lifecycle

May 18, 2022Published on NVD

Recommendation: Monitor — no exploitation signal at the moment.

An information disclosure vulnerability was reported in some Lenovo Personal Cloud Storage devices that could allow an unauthenticated user to retrieve device and networking details.

CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N

Affected products

Lenovo · Personal Cloud Storage A1 Lenovo · Personal Cloud Storage T1 Lenovo · Personal Cloud Storage T2 Lenovo · Personal Cloud Storage T2Pro Lenovo · Personal Cloud Storage X1

Want to know if your infrastructure is exposed to this?

Talk to TrueHacking →

References

https://iknow.lenovo.com.cn/detail/dc_200017.html