Description
A command injection vulnerability was reported in some Lenovo Personal Cloud Storage devices that could allow an authenticated user to execute operating system commands by sending a crafted packet to the device.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Lenovo | Personal Cloud Storage A1 | unspecified – < 5.3.6.a1 | 5.3.6.a1 |
| Lenovo | Personal Cloud Storage T1 | unspecified – < 5.3.6.t1 | 5.3.6.t1 |
| Lenovo | Personal Cloud Storage X1 | unspecified – < 5.3.8.x1 | 5.3.8.x1 |
| Lenovo | Personal Cloud Storage T2 | unspecified – < 5.3.8.t2 | 5.3.8.t2 |
| Lenovo | Personal Cloud Storage T2Pro | unspecified – < 5.3.7.t2-pro | 5.3.7.t2-pro |