CVE-2021-42850CWE-798

A weak default administrator password for the web interface and serial port was reported in some Lenovo Personal Cloud Storage devices that could allow…

High · published May 18, 2022

CVSS v3.1
8.8
EPSS
0%
Percentile
14.6
In the wild
Unconfirmed
What it is

A weak default administrator password for the web interface and serial port was reported in some Lenovo Personal Cloud Storage devices that could allow unauthorized device access to an attacker with physical or local network access.

The record
Technical detail
CVSS v3.1
8.8 · HIGH
Vector
CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
CVSS v4.0
Not supplied
EPSS
0.00243 · 14.6th percentile
Weakness
CWE-798 · Use of Hard-coded Credentials
Published
2022-05-18T16:10Z
EPSS history
Timeline
  • 18 MAY 16:10Z
    A weak default administrator password for the web interface and serial port was reported in some Lenovo Personal Cloud Storage devices that could allow…
    cvelistv5