CVE-2021-3451 Path traversal in PCManager

What is CVE-2021-3451?

CVE-2021-3451 is a medium-severity path traversal vulnerability in Lenovo PCManager, published on 27 Apr 2021. It can only be exploited from the same machine or local network, with no action from the victim.

Official description

A denial of service vulnerability was reported in Lenovo PCManager, prior to version 3.0.400.3252, that could allow configuration files to be written to non-standard locations.

Weakness: CWE-276

Which versions are affected by CVE-2021-3451?

It affects 1 product.

Products include Lenovo Pcmanager.

How do I fix CVE-2021-3451?

No fix has been published for CVE-2021-3451 yet. Limit exposure of the affected software until one is available.

Upgrade, and resolve every user-supplied path against an allowed base folder before opening it. More about Path traversal.

Is CVE-2021-3451 being exploited?

There is no known exploitation of CVE-2021-3451 in the wild and no public exploit code.

Other vulnerabilities in Lenovo PCManager

• CVE-2025-10581 Privilege escalation in PC Manager High 8.5
• CVE-2025-8486 Privilege escalation in PC Manager High 8.5
• CVE-2025-8098 Privilege escalation in PC Manager High 8.5
• CVE-2025-2501 Privilege escalation in PC Manager High 8.5
• CVE-2025-2502 Privilege escalation in PC Manager High 8.5

Sources

• CVE record
• NVD
• OSV
• GitHub advisory
• How this page is made

Also known as GHSA-j6pp-8p4v-4rwc.