CVE-2021-42851

Summary

A vulnerability was reported in some Lenovo Personal Cloud Storage devices that could allow an unauthenticated user to create a standard user account.

Affected Software

VendorProductVersion RangeStatus
LenovoPersonal Cloud Storage A1unspecified < 5.3.6.a1affected
LenovoPersonal Cloud Storage T1unspecified < 5.3.6.t1affected
LenovoPersonal Cloud Storage X1unspecified < 5.3.8.x1affected
LenovoPersonal Cloud Storage T2unspecified < 5.3.8.t2affected
LenovoPersonal Cloud Storage T2Prounspecified < 5.3.7.t2-proaffected

Weaknesses

  • CWE-862: CWE-862 Missing Authorization

ADP Enrichment

CVE Program Container

Additional References

References