High

DATE	CVE	VULNERABILITY TITLE	RISK
2022-05-18	CVE-2021-42850	Use of Hard-coded Credentials vulnerability in Lenovo products A weak default administrator password for the web interface and serial port was reported in some Lenovo Personal Cloud Storage devices that could allow unauthorized device access to an attacker with physical or local network access. local low complexity lenovo CWE-798	7.8
2022-05-18	CVE-2021-42852	OS Command Injection vulnerability in Lenovo products A command injection vulnerability was reported in some Lenovo Personal Cloud Storage devices that could allow an authenticated user to execute operating system commands by sending a crafted packet to the device. low complexity lenovo CWE-78	8.0