A potential improper file path validation vulnerability was reported in some Lenovo Personal Cloud Storage devices that could allow a remote authenticated user to move or access files belonging to other users on the same device.
Scoped product and version facts
Fix information unknown; no fixed version is derived here. Missing information does not prove that no fix exists.
Exploitation unknown; this catalogue does not assess exploitation.
Personal Cloud T2s
Vendor
Lenovo
Product
Personal Cloud T2s
Platforms
Unknown
Default status
unaffected
Personal Cloud T2s · Scoped product and version facts
Version (version)
Status (status)
Version scheme (versionType)
Exclusive end (lessThan)
Inclusive end (lessThanOrEqual)
Status changes (at → status)
0
affected
custom
5.5.6.t2s.3
Unavailable
None listed
Personal Cloud T2Pro
Vendor
Lenovo
Product
Personal Cloud T2Pro
Platforms
Unknown
Default status
unaffected
Personal Cloud T2Pro · Scoped product and version facts
Version (version)
Status (status)
Version scheme (versionType)
Exclusive end (lessThan)
Inclusive end (lessThanOrEqual)
Status changes (at → status)
0
affected
custom
5.4.8.t2pro.2
Unavailable
None listed
Personal Cloud X1s
Vendor
Lenovo
Product
Personal Cloud X1s
Platforms
Unknown
Default status
unaffected
Personal Cloud X1s · Scoped product and version facts
Version (version)
Status (status)
Version scheme (versionType)
Exclusive end (lessThan)
Inclusive end (lessThanOrEqual)
Status changes (at → status)
0
affected
custom
5.4.8.x1s.2
Unavailable
None listed
Home Storage Hub T20
Vendor
Lenovo
Product
Home Storage Hub T20
Platforms
Unknown
Default status
unaffected
Home Storage Hub T20 · Scoped product and version facts
Version (version)
Status (status)
Version scheme (versionType)
Exclusive end (lessThan)
Inclusive end (lessThanOrEqual)
Status changes (at → status)
0
affected
custom
5.5.8.t20.1
Unavailable
None listed
Home Storage Hub X20
Vendor
Lenovo
Product
Home Storage Hub X20
Platforms
Unknown
Default status
unaffected
Home Storage Hub X20 · Scoped product and version facts
Version (version)
Status (status)
Version scheme (versionType)
Exclusive end (lessThan)
Inclusive end (lessThanOrEqual)
Status changes (at → status)
0
affected
custom
5.4.4.x20.1
Unavailable
None listed
Personal Cloud T1
Vendor
Lenovo
Product
Personal Cloud T1
Platforms
Unknown
Default status
unaffected
Personal Cloud T1 · Scoped product and version facts
Version (version)
Status (status)
Version scheme (versionType)
Exclusive end (lessThan)
Inclusive end (lessThanOrEqual)
Status changes (at → status)
0
affected
custom
Unavailable
5.4.0.t1.6
None listed
Personal Cloud A1
Vendor
Lenovo
Product
Personal Cloud A1
Platforms
Unknown
Default status
unaffected
Personal Cloud A1 · Scoped product and version facts
Version (version)
Status (status)
Version scheme (versionType)
Exclusive end (lessThan)
Inclusive end (lessThanOrEqual)
Status changes (at → status)
0
affected
custom
Unavailable
5.4.2.a1.3
None listed
Personal Cloud A1s
Vendor
Lenovo
Product
Personal Cloud A1s
Platforms
Unknown
Default status
unaffected
Personal Cloud A1s · Scoped product and version facts
Version (version)
Status (status)
Version scheme (versionType)
Exclusive end (lessThan)
Inclusive end (lessThanOrEqual)
Status changes (at → status)
0
affected
custom
Unavailable
5.5.6.a1s
None listed
Personal Cloud T2
Vendor
Lenovo
Product
Personal Cloud T2
Platforms
Unknown
Default status
unaffected
Personal Cloud T2 · Scoped product and version facts
Version (version)
Status (status)
Version scheme (versionType)
Exclusive end (lessThan)
Inclusive end (lessThanOrEqual)
Status changes (at → status)
0
affected
custom
Unavailable
5.4.5.t2.2
None listed
Personal Cloud X1
Vendor
Lenovo
Product
Personal Cloud X1
Platforms
Unknown
Default status
unaffected
Personal Cloud X1 · Scoped product and version facts