CVE-2021-42849CWE-798

A weak default password for the serial port was reported in some Lenovo Personal Cloud Storage devices that could allow unauthorized device access to an…

Medium · published May 18, 2022

CVSS v3.1
6.8
EPSS
0%
Percentile
13.3
In the wild
Unconfirmed
What it is

A weak default password for the serial port was reported in some Lenovo Personal Cloud Storage devices that could allow unauthorized device access to an attacker with physical access.

The record
Technical detail
CVSS v3.1
6.8 · MEDIUM
Vector
CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
CVSS v4.0
Not supplied
EPSS
0.00233 · 13.3th percentile
Weakness
CWE-798 · Use of Hard-coded Credentials
Published
2022-05-18T16:10Z
EPSS history
Timeline
  • 18 MAY 16:10Z
    A weak default password for the serial port was reported in some Lenovo Personal Cloud Storage devices that could allow unauthorized device access to an…
    cvelistv5