CVE-2021-42848

MediumCVSS 5.3/10Last modified Jun 17, 2026

Description

An information disclosure vulnerability was reported in some Lenovo Personal Cloud Storage devices that could allow an unauthenticated user to retrieve device and networking details.

Metrics

CVSS 3.1 5.3/10CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N

Weakness enumeration

CWE-862

Affected software

VendorProductVersions
LenovoPersonal Cloud Storage A1>= unspecified, < 5.3.6.a1
LenovoPersonal Cloud Storage T1>= unspecified, < 5.3.6.t1
LenovoPersonal Cloud Storage X1>= unspecified, < 5.3.8.x1
LenovoPersonal Cloud Storage T2>= unspecified, < 5.3.8.t2
LenovoPersonal Cloud Storage T2Pro>= unspecified, < 5.3.7.t2-pro

References

Timeline

Published
May 18, 2022
Last modified
Jun 17, 2026
NVD status
Modified

Related CVEs from 2021

CVE-2021-428496.8A weak default password for the serial port was reported in some Lenovo Personal Cloud Storage devices that could allow unauthorized device CVE-2021-42856.1A vulnerability classified as problematic was found in Nagios NCPA. This vulnerability affects unknown code of the file agent/listener/templCVE-2021-428507.8A weak default administrator password for the web interface and serial port was reported in some Lenovo Personal Cloud Storage devices that CVE-2021-428515.3A vulnerability was reported in some Lenovo Personal Cloud Storage devices that could allow an unauthenticated user to create a standard useCVE-2021-428528.0A command injection vulnerability was reported in some Lenovo Personal Cloud Storage devices that could allow an authenticated user to execuCVE-2021-428539.8It was discovered that the SteelCentral AppInternals Dynamic Sampling Agent's (DSA) AgentDiagnosticServlet has directory traversal vulnerabiCVE-2021-428549.8It was discovered that the SteelCentral AppInternals Dynamic Sampling Agent's (DSA) PluginServlet has directory traversal vulnerabilities atCVE-2021-428557.8It was discovered that the SteelCentral AppInternals Dynamic Sampling Agent (DSA) uses the ".debug_command.config" file to store a json striCVE-2021-428566.1It was discovered that the /DsaDataTest endpoint is susceptible to Cross-site scripting (XSS) attack. It was noted that the Metric parameterCVE-2021-428575.3It was discovered that the SteelCentral AppInternals Dynamic Sampling Agent's (DSA) AgentDaServlet has directory traversal vulnerabilities aCVE-2021-428597.5A memory leak issue was discovered in Mini-XML v3.2 that could cause a denial of service. NOTE: testing reports are inconsistent, with some CVE-2021-42867.5A vulnerability, which was classified as problematic, has been found in cocagne pysrp up to 1.0.16. This issue affects the function calculat
CVE-2021-42848: Medium severity, CVSS 5.3 | Vulnix