CVE:CVE-2021-42852
CNNVD:CNNVD-202205-3703
Lenovo Personal Cloud Storage是中国联想（Lenovo）公司的一个云存储平台。
Lenovo Personal Cloud Storage存在操作系统命令注入漏洞。攻击者利用该漏洞通过向设备发送特制的数据包来执行操作系统命令。
solution:Upgrade lenovo a1_firmware to a higher version than 5.3.6.a1,and avoid the version (,5.3.6.a1); Upgrade lenovo t1_firmware to a higher version than 5.3.6.t1,and avoid the version (,5.3.6.t1); Upgrade lenovo x1_firmware to a higher version than 5.3.8.x1,and avoid the version (,5.3.8.x1); Upgrade lenovo t2_firmware to a higher version than 5.3.8.t2,and avoid the version (,5.3.8.t2); Upgrade lenovo t2pro_firmware to a higher version than 5.3.7.t2-pro,and avoid the version (,5.3.7.t2-pro)