Approved changes feed: RSS · Atom

cpe:2.3:o:lenovo:t2_firmware:*:*:*:*:*:*:*:*

part: o version: * update: *

VendorLenovo (c98ed681-bc65-5c44-8bbb-e0a228f96d0e)
ProductT2 Firmware (3763f8ee-fddf-5ede-be06-60639cc96cc9)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2021-42852 vulnerable 2026-06-08 05:35:22.995862 Details available
HIGH (8)
A command injection vulnerability was reported in some Lenovo Personal Cloud Storage devices that could allow an authenticated user to execute operating system commands by sending a crafted packet to the device.
Published: 2022-05-18T16:10:34.000Z
Updated: 2024-08-04T03:38:50.310Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2021-42851 vulnerable 2026-06-08 05:35:22.994636 Details available
MEDIUM (6.3)
A vulnerability was reported in some Lenovo Personal Cloud Storage devices that could allow an unauthenticated user to create a standard user account.
Published: 2022-05-18T16:10:32.000Z
Updated: 2024-08-04T03:38:50.248Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2021-42850 vulnerable 2026-06-08 05:35:22.993623 Details available
HIGH (8.8)
A weak default administrator password for the web interface and serial port was reported in some Lenovo Personal Cloud Storage devices that could allow unauthorized device access to an attacker with physical or local network access.
Published: 2022-05-18T16:10:30.000Z
Updated: 2024-08-04T03:38:50.139Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2021-42849 vulnerable 2026-06-08 05:35:22.992519 Details available
MEDIUM (6.8)
A weak default password for the serial port was reported in some Lenovo Personal Cloud Storage devices that could allow unauthorized device access to an attacker with physical access.
Published: 2022-05-18T16:10:28.000Z
Updated: 2024-08-04T03:38:50.219Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2021-42848 vulnerable 2026-06-08 05:35:22.986750 Details available
MEDIUM (4.3)
An information disclosure vulnerability was reported in some Lenovo Personal Cloud Storage devices that could allow an unauthenticated user to retrieve device and networking details.
Published: 2022-05-18T16:10:27.000Z
Updated: 2024-08-04T03:38:50.160Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.