PT-2022-11703 · Lenovo · Lenovo Personal Cloud Storage

Kais + 1 · Published 2022-05-18 · Updated 2022-06-01 · CVE-2021-42848

Positive Technologies (AI Summary)

CVSS v3.1

5.3

Medium

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N

Name of the Vulnerable Software and Affected Versions Lenovo Personal Cloud Storage devices (affected versions not specified)

Description An information disclosure issue was reported in some Lenovo Personal Cloud Storage devices. This could allow an unauthenticated user to retrieve device and networking details.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Missing Authorization

Weakness Enumeration

CWE-862

Related Identifiers

CVE-2021-42848

Affected Products

Lenovo Personal Cloud Storage

References · 5

• https://nvd.nist.gov/vuln/detail/CVE-2021-42848 · Security Note
• https://iknow.lenovo.com.cn/detail/dc_200017.html · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2021-42848 · Vendor Advisory
• https://t.me/cibsecurity/42934 · Telegram Post
• https://t.me/cvenotify/30958 · Telegram Post