CVE-2021-42848CWE-862

An information disclosure vulnerability was reported in some Lenovo Personal Cloud Storage devices that could allow an unauthenticated user to retrieve device…

Medium · published May 18, 2022

CVSS v3.1
4.3
EPSS
1%
Percentile
54.5
In the wild
Unconfirmed
What it is

An information disclosure vulnerability was reported in some Lenovo Personal Cloud Storage devices that could allow an unauthenticated user to retrieve device and networking details.

The record
Technical detail
CVSS v3.1
4.3 · MEDIUM
Vector
CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
CVSS v4.0
Not supplied
EPSS
0.00751 · 54.5th percentile
Weakness
CWE-862 · Missing Authorization
Published
2022-05-18T16:10Z
EPSS history
Timeline
  • 18 MAY 16:10Z
    An information disclosure vulnerability was reported in some Lenovo Personal Cloud Storage devices that could allow an unauthenticated user to retrieve device…
    cvelistv5