CVE-2021-42849

CVE.org · Published

Record status: Published
Identifier year (not publication year): 2021
Source publication: May 18, 2022
Source updated: Aug 4, 2024
Imported by cveboard: Oct 24, 2026
Source snapshot: cve_2026-10-24_midnight_baseline · Oct 24, 2026

CNA source text (English)

A weak default password for the serial port was reported in some Lenovo Personal Cloud Storage devices that could allow unauthorized device access to an attacker with physical access.

Scoped product and version facts

Fix information unknown; no fixed version is derived here. Missing information does not prove that no fix exists.

Exploitation unknown; this catalogue does not assess exploitation.

Personal Cloud Storage A1

Vendor: Lenovo
Product: Personal Cloud Storage A1
Platforms: Unknown
Default status: Unknown

Personal Cloud Storage A1 · Scoped product and version facts
Version (version)	Status (status)	Version scheme (versionType)	Exclusive end (lessThan)	Inclusive end (lessThanOrEqual)	Status changes (at → status)
unspecified	`affected`	custom	5.3.6.a1	Unavailable	None listed

Personal Cloud Storage T1

Vendor: Lenovo
Product: Personal Cloud Storage T1
Platforms: Unknown
Default status: Unknown

Personal Cloud Storage T1 · Scoped product and version facts
Version (version)	Status (status)	Version scheme (versionType)	Exclusive end (lessThan)	Inclusive end (lessThanOrEqual)	Status changes (at → status)
unspecified	`affected`	custom	5.3.6.t1	Unavailable	None listed

Personal Cloud Storage X1

Vendor: Lenovo
Product: Personal Cloud Storage X1
Platforms: Unknown
Default status: Unknown

Personal Cloud Storage X1 · Scoped product and version facts
Version (version)	Status (status)	Version scheme (versionType)	Exclusive end (lessThan)	Inclusive end (lessThanOrEqual)	Status changes (at → status)
unspecified	`affected`	custom	5.3.8.x1	Unavailable	None listed

Personal Cloud Storage T2

Vendor: Lenovo
Product: Personal Cloud Storage T2
Platforms: Unknown
Default status: Unknown

Personal Cloud Storage T2 · Scoped product and version facts
Version (version)	Status (status)	Version scheme (versionType)	Exclusive end (lessThan)	Inclusive end (lessThanOrEqual)	Status changes (at → status)
unspecified	`affected`	custom	5.3.8.t2	Unavailable	None listed

Personal Cloud Storage T2Pro

Vendor: Lenovo
Product: Personal Cloud Storage T2Pro
Platforms: Unknown
Default status: Unknown

Personal Cloud Storage T2Pro · Scoped product and version facts
Version (version)	Status (status)	Version scheme (versionType)	Exclusive end (lessThan)	Inclusive end (lessThanOrEqual)	Status changes (at → status)
unspecified	`affected`	custom	5.3.7.t2-pro	Unavailable	None listed