Lenovo Personal Cloud Storage X1

• CVE-2021-42852 High 8.0 A command injection vulnerability was reported in some Lenovo Personal Cloud Storage devices that could allow an authenticated user to execute operating system commands by sending a crafted packet to 0.8%
• CVE-2021-42851 Medium 6.3 A vulnerability was reported in some Lenovo Personal Cloud Storage devices that could allow an unauthenticated user to create a standard user account. 0.6%
• CVE-2021-42850 High 8.8 A weak default administrator password for the web interface and serial port was reported in some Lenovo Personal Cloud Storage devices that could allow unauthorized device access to an attacker with p 0.2%
• CVE-2021-42849 Medium 6.8 A weak default password for the serial port was reported in some Lenovo Personal Cloud Storage devices that could allow unauthorized device access to an attacker with physical access. 0.2%
• CVE-2021-42848 Medium 4.3 An information disclosure vulnerability was reported in some Lenovo Personal Cloud Storage devices that could allow an unauthenticated user to retrieve device and networking details. 0.8%