CVSS 3.1
5.3 mediumCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:NCVE-2021-42848
Medium (5.3) in lenovo. EPSS 0.8% chance of exploitation in the next 30 days.
An information disclosure vulnerability was reported in some Lenovo Personal Cloud Storage devices that could allow an unauthenticated user to retrieve device and networking details.
Severity
- EPSS
- 0.8% chance of exploitation in the next 30 days; higher than 55% of CVEs (scores of 2026-10-31)
- CWE
- CWE-862
- Published
- Modified
- Record from
- the NVD, synced
Affected
- lenovo:a1_firmware
- lenovo:t1_firmware
- lenovo:t2_firmware
- lenovo:t2pro_firmware
- lenovo:x1_firmware