PatchTheCVE: x1 firmwarehttps://patchthecve.com/CVEs with upgrade or downgrade fix stepsCVE-2021-42852: A command injection vulnerability was reported in some Lenovo Personal Cloud Storage devices that could allow https://patchthecve.com/cve/CVE-2021-42852.htmlhttps://patchthecve.com/cve/CVE-2021-42852.htmlWed, 17 Jun 2026 04:10:12 +0000HIGH 8.0: A command injection vulnerability was reported in some Lenovo Personal Cloud Storage devices that could allow an authenticated user to execute operating system commands by sending a crafted packet to the device.CVE-2021-42851: A vulnerability was reported in some Lenovo Personal Cloud Storage devices that could allow an unauthenticatedhttps://patchthecve.com/cve/CVE-2021-42851.htmlhttps://patchthecve.com/cve/CVE-2021-42851.htmlWed, 17 Jun 2026 04:10:12 +0000MEDIUM 6.3: A vulnerability was reported in some Lenovo Personal Cloud Storage devices that could allow an unauthenticated user to create a standard user account.CVE-2021-42850: A weak default administrator password for the web interface and serial port was reported in some Lenovo Personhttps://patchthecve.com/cve/CVE-2021-42850.htmlhttps://patchthecve.com/cve/CVE-2021-42850.htmlWed, 17 Jun 2026 04:10:12 +0000HIGH 8.8: A weak default administrator password for the web interface and serial port was reported in some Lenovo Personal Cloud Storage devices that could allow unauthorized device access to an attacker with physical or local network access.CVE-2021-42849: A weak default password for the serial port was reported in some Lenovo Personal Cloud Storage devices that cohttps://patchthecve.com/cve/CVE-2021-42849.htmlhttps://patchthecve.com/cve/CVE-2021-42849.htmlWed, 17 Jun 2026 04:10:12 +0000MEDIUM 6.8: A weak default password for the serial port was reported in some Lenovo Personal Cloud Storage devices that could allow unauthorized device access to an attacker with physical access.CVE-2021-42848: An information disclosure vulnerability was reported in some Lenovo Personal Cloud Storage devices that could https://patchthecve.com/cve/CVE-2021-42848.htmlhttps://patchthecve.com/cve/CVE-2021-42848.htmlWed, 17 Jun 2026 04:10:11 +0000MEDIUM 4.3: An information disclosure vulnerability was reported in some Lenovo Personal Cloud Storage devices that could allow an unauthenticated user to retrieve device and networking details.CVE-2017-10856: SEIL/X 4.60 to 5.72, SEIL/B1 4.60 to 5.72, SEIL/x86 3.20 to 5.72, SEIL/BPV4 5.00 to 5.72 allows remote attackehttps://patchthecve.com/cve/CVE-2017-10856.htmlhttps://patchthecve.com/cve/CVE-2017-10856.htmlWed, 17 Jun 2026 01:00:49 +0000LOW 3.7: SEIL/X 4.60 to 5.72, SEIL/B1 4.60 to 5.72, SEIL/x86 3.20 to 5.72, SEIL/BPV4 5.00 to 5.72 allows remote attackers to cause a temporary failure of the device's encrypted communications via a specially crafted packet.CVE-2017-2153: SEIL/x86 Fuji 1.70 to 5.62, SEIL/BPV4 5.00 to 5.62, SEIL/X1 1.30 to 5.62, SEIL/X2 1.30 to 5.62, SEIL/B1 1.00 thttps://patchthecve.com/cve/CVE-2017-2153.htmlhttps://patchthecve.com/cve/CVE-2017-2153.htmlWed, 17 Jun 2026 01:15:39 +0000HIGH 7.5: SEIL/x86 Fuji 1.70 to 5.62, SEIL/BPV4 5.00 to 5.62, SEIL/X1 1.30 to 5.62, SEIL/X2 1.30 to 5.62, SEIL/B1 1.00 to 5.62 allows remote attackers to cause a denial of service via specially crafted IPv4 UDP packets.