PatchTheCVEx1 firmware vulnerabilities and fixes
Recent CVEs affecting x1 firmware, with upgrade or downgrade steps. 7 tracked.
Also searched as: x1firmware.
x1 firmware has 7 tracked vulnerabilities, 0 critical. A fixed release or vendor patch exists for 5. Most recent: 2022-05-18. Highest priority: CVE-2017-2153 (score 50/100).
- CVE-2021-42852 HIGH 8.0 UPGRADE UPGRADE A command injection vulnerability was reported in some Lenovo Personal Cloud Storage devices that could allow
- CVE-2021-42851 MEDIUM 6.3 UPGRADE UPGRADE A vulnerability was reported in some Lenovo Personal Cloud Storage devices that could allow an unauthenticated
- CVE-2021-42850 HIGH 8.8 UPGRADE UPGRADE A weak default administrator password for the web interface and serial port was reported in some Lenovo Person
- CVE-2021-42849 MEDIUM 6.8 UPGRADE UPGRADE A weak default password for the serial port was reported in some Lenovo Personal Cloud Storage devices that co
- CVE-2021-42848 MEDIUM 4.3 UPGRADE UPGRADE An information disclosure vulnerability was reported in some Lenovo Personal Cloud Storage devices that could
- CVE-2017-2153 HIGH 7.5 MITIGATE MITIGATE SEIL/x86 Fuji 1.70 to 5.62, SEIL/BPV4 5.00 to 5.62, SEIL/X1 1.30 to 5.62, SEIL/X2 1.30 to 5.62, SEIL/B1 1.00 t
- CVE-2017-10856 LOW 3.7 MITIGATE MITIGATE SEIL/X 4.60 to 5.72, SEIL/B1 4.60 to 5.72, SEIL/x86 3.20 to 5.72, SEIL/BPV4 5.00 to 5.72 allows remote attacke
FAQ
How do I fix x1 firmware vulnerabilities?
Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.
Is x1 firmware being exploited right now?
None of the tracked x1 firmware CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.
Which x1 firmware CVE should I patch first?
CVE-2017-2153 currently ranks highest (50/100): SEIL/x86 Fuji 1.70 to 5.62, SEIL/BPV4 5.00 to 5.62, SEIL/X1 1.30 to 5.62, SEIL/X2 1.30 to 5.62, SEIL/B1 1.00 t.