Description
A weak default password for the serial port was reported in some Lenovo Personal Cloud Storage devices that could allow unauthorized device access to an attacker with physical access.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Lenovo | Personal Cloud Storage A1 | unspecified – < 5.3.6.a1 | 5.3.6.a1 |
| Lenovo | Personal Cloud Storage T1 | unspecified – < 5.3.6.t1 | 5.3.6.t1 |
| Lenovo | Personal Cloud Storage X1 | unspecified – < 5.3.8.x1 | 5.3.8.x1 |
| Lenovo | Personal Cloud Storage T2 | unspecified – < 5.3.8.t2 | 5.3.8.t2 |
| Lenovo | Personal Cloud Storage T2Pro | unspecified – < 5.3.7.t2-pro | 5.3.7.t2-pro |