Improper File Path Validation in Lenovo Personal Cloud Allows User File Access Hijacking

A potential improper file path validation vulnerability was reported in some Lenovo Personal Cloud Storage devices that could allow a remote authenticated user to move or access files belonging to other users on the same device.

Remote Authenticated Command Injection Allowing Arbitrary Code Execution on Lenovo Personal Cloud Devices

A potential vulnerability was reported in some Lenovo Personal Cloud Storage devices that could allow a remote authenticated user on the local network to execute arbitrary commands on the device.

A DLL hijack vulnerability was reported in Lenovo Personal Cloud that could allow a local attacker to execute code with elevated privileges.