EUVD-2026-30041

A potential improper file path validation vulnerability was reported in some Lenovo Personal Cloud Storage devices that could allow a remote authenticated user to move or access files belonging to other users on the same device...

CVE-2026-6281: Improper Neutralization of Special Elements used in an OS Command

A potential vulnerability was reported in some Lenovo Personal Cloud Storage devices that could allow a remote authenticated user on the local network to execute arbitrary commands on the device...

CVE-2026-6282: Improper Limitation of a Pathname to a Restricted Directory

A potential improper file path validation vulnerability was reported in some Lenovo Personal Cloud Storage devices that could allow a remote authenticated user to move or access files belonging to other users on the same device...

EUVD-2021-29807

Malicious code in bioql PyPI...

CVE-2021-42852

A command injection vulnerability was reported in some Lenovo Personal Cloud Storage devices that could allow an authenticated user to execute operating system commands by sending a crafted packet to the device...

CVE-2021-42850

A weak default administrator password for the web interface and serial port was reported in some Lenovo Personal Cloud Storage devices that could allow unauthorized device access to an attacker with physical or local network access...

CVE-2021-42850

A weak default administrator password for the web interface and serial port was reported in some Lenovo Personal Cloud Storage devices that could allow unauthorized device access to an attacker with physical or local network access...

CVE-2021-42849: Use of Hard-coded Credentials

A weak default password for the serial port was reported in some Lenovo Personal Cloud Storage devices that could allow unauthorized device access to an attacker with physical access...

CVE-2021-42851: Missing Authorization

A vulnerability was reported in some Lenovo Personal Cloud Storage devices that could allow an unauthenticated user to create a standard user account...

CVE-2021-42850: Use of Hard-coded Credentials

A weak default administrator password for the web interface and serial port was reported in some Lenovo Personal Cloud Storage devices that could allow unauthorized device access to an attacker with physical or local network access...

PT-2022-11703

Name of the Vulnerable Software and Affected Versions Lenovo Personal Cloud Storage devices affected versions not specified Description An information disclosure issue was reported in some Lenovo Personal Cloud Storage devices. This could allow an unauthenticated user to retrieve device and...

PT-2022-11708

Name of the Vulnerable Software and Affected Versions Lenovo Personal Cloud Storage devices affected versions not specified Description A command injection issue was reported in Lenovo Personal Cloud Storage devices. This could allow an authenticated user to execute operating system commands by...

CVE-2021-42852: Improper Neutralization of Special Elements used in an OS Command

A command injection vulnerability was reported in some Lenovo Personal Cloud Storage devices that could allow an authenticated user to execute operating system commands by sending a crafted packet to the device...

CVE-2021-42848: Missing Authorization

An information disclosure vulnerability was reported in some Lenovo Personal Cloud Storage devices that could allow an unauthenticated user to retrieve device and networking details...

PT-2022-11706

Name of the Vulnerable Software and Affected Versions Lenovo Personal Cloud Storage devices affected versions not specified Description A weak default administrator password for the web interface and serial port was reported in some Lenovo Personal Cloud Storage devices. This could allow...