CVE-2021-42852

CVE.org · Published

Record status: Published
Identifier year (not publication year): 2021
Source publication: May 18, 2022
Source updated: Aug 4, 2024
Imported by cveboard: Oct 24, 2026
Source snapshot: cve_2026-10-24_midnight_baseline · Oct 24, 2026

CNA source text (English)

A command injection vulnerability was reported in some Lenovo Personal Cloud Storage devices that could allow an authenticated user to execute operating system commands by sending a crafted packet to the device.

Scoped product and version facts

Fix information unknown; no fixed version is derived here. Missing information does not prove that no fix exists.

Exploitation unknown; this catalogue does not assess exploitation.

Personal Cloud Storage A1

Vendor: Lenovo
Product: Personal Cloud Storage A1
Platforms: Unknown
Default status: Unknown

Personal Cloud Storage A1 · Scoped product and version facts
Version (version)	Status (status)	Version scheme (versionType)	Exclusive end (lessThan)	Inclusive end (lessThanOrEqual)	Status changes (at → status)
unspecified	`affected`	custom	5.3.6.a1	Unavailable	None listed

Personal Cloud Storage T1

Vendor: Lenovo
Product: Personal Cloud Storage T1
Platforms: Unknown
Default status: Unknown

Personal Cloud Storage T1 · Scoped product and version facts
Version (version)	Status (status)	Version scheme (versionType)	Exclusive end (lessThan)	Inclusive end (lessThanOrEqual)	Status changes (at → status)
unspecified	`affected`	custom	5.3.6.t1	Unavailable	None listed

Personal Cloud Storage X1

Vendor: Lenovo
Product: Personal Cloud Storage X1
Platforms: Unknown
Default status: Unknown

Personal Cloud Storage X1 · Scoped product and version facts
Version (version)	Status (status)	Version scheme (versionType)	Exclusive end (lessThan)	Inclusive end (lessThanOrEqual)	Status changes (at → status)
unspecified	`affected`	custom	5.3.8.x1	Unavailable	None listed

Personal Cloud Storage T2

Vendor: Lenovo
Product: Personal Cloud Storage T2
Platforms: Unknown
Default status: Unknown

Personal Cloud Storage T2 · Scoped product and version facts
Version (version)	Status (status)	Version scheme (versionType)	Exclusive end (lessThan)	Inclusive end (lessThanOrEqual)	Status changes (at → status)
unspecified	`affected`	custom	5.3.8.t2	Unavailable	None listed

Personal Cloud Storage T2Pro

Vendor: Lenovo
Product: Personal Cloud Storage T2Pro
Platforms: Unknown
Default status: Unknown

Personal Cloud Storage T2Pro · Scoped product and version facts
Version (version)	Status (status)	Version scheme (versionType)	Exclusive end (lessThan)	Inclusive end (lessThanOrEqual)	Status changes (at → status)
unspecified	`affected`	custom	5.3.7.t2-pro	Unavailable	None listed