CVE-2021-42852

🗓️ 18 May 2022 16:10:34Reported by lenovoType

cve🔗 web.nvd.nist.gov📰️ 1 Media mentions👁 68 Views

Command injection vulnerability in Lenovo Personal Cloud Storage devices allows authenticated user to execute OS commands

Reporter	Title	Published	Views	Family All 8
Circl	CVE-2021-42852	18 May 202220:28	–	circl
CNNVD	Lenovo Personal Cloud Storage 操作系统命令注入漏洞	18 May 202200:00	–	cnnvd
CNVD	Lenovo Personal Cloud Storage命令注入漏洞	20 May 202200:00	–	cnvd
Cvelist	CVE-2021-42852	18 May 202216:10	–	cvelist
EUVD	EUVD-2021-29807	3 Oct 202520:07	–	euvd
NVD	CVE-2021-42852	18 May 202216:15	–	nvd
Prion	Command injection	18 May 202216:15	–	prion
RedhatCVE	CVE-2021-42852	22 May 202518:51	–	redhatcve

NVD

Vulners

Node

lenovo a1_firmwareRange<5.3.6.a1

AND

lenovo a1Match-

Node

lenovo t1_firmwareRange<5.3.6.t1

AND

lenovo t1Match-

Node

lenovo x1_firmwareRange<5.3.8.x1

AND

lenovo x1Match-

Node

lenovo t2_firmwareRange<5.3.8.t2

AND

lenovo t2Match-

Node

lenovo t2pro_firmwareRange<5.3.7.t2-pro

AND

lenovo t2proMatch-

[
  {
    "product": "Personal Cloud Storage A1",
    "vendor": "Lenovo",
    "versions": [
      {
        "lessThan": "5.3.6.a1",
        "status": "affected",
        "version": "unspecified",
        "versionType": "custom"
      }
    ]
  },
  {
    "product": "Personal Cloud Storage T1",
    "vendor": "Lenovo",
    "versions": [
      {
        "lessThan": "5.3.6.t1",
        "status": "affected",
        "version": "unspecified",
        "versionType": "custom"
      }
    ]
  },
  {
    "product": "Personal Cloud Storage X1",
    "vendor": "Lenovo",
    "versions": [
      {
        "lessThan": "5.3.8.x1",
        "status": "affected",
        "version": "unspecified",
        "versionType": "custom"
      }
    ]
  },
  {
    "product": "Personal Cloud Storage T2",
    "vendor": "Lenovo",
    "versions": [
      {
        "lessThan": "5.3.8.t2",
        "status": "affected",
        "version": "unspecified",
        "versionType": "custom"
      }
    ]
  },
  {
    "product": "Personal Cloud Storage T2Pro",
    "vendor": "Lenovo",
    "versions": [
      {
        "lessThan": "5.3.7.t2-pro",
        "status": "affected",
        "version": "unspecified",
        "versionType": "custom"
      }
    ]
  }
]

Source	Link
iknow	www.iknow.lenovo.com.cn/detail/dc_200017.html

21 Nov 2024 06:28Current

8High risk

Vulners AI Score8

CVSS 27.7

CVSS 3.18

EPSS0.00081

CWE-78