TI-2023-10805 Aliases CVE-2023-25495 GHSA-66qf-8j2h-9xmq

Insufficiently protected credentials in Lenovo XClarity Controller

LOW 23CWE-522Published 2023-04-28 · Updated 2025-01-30

Key facts

Attack vector: Network
Privileges required: High
User interaction: None
Attack complexity: Low
Impact type: Information disclosure
Confidentiality · integrity · availability: High · None · None
Fix status: No fix listed

Attack profile from CVSS 3.1 · CNA. Fix status from CNA. Impact type from CWE-522.

Summary

A valid, authenticated administrative user can query a web interface API to reveal the configured LDAP client password used by XCC to authenticate to an external LDAP server in certain configurations. There is no exposure where no LDAP client password is configured

Why it matters now

Exploitation None reported CISA SSVC · not in CISA KEV

EPSS 0.00567 47th percentileScored 2026-11-07

Fix No fix listed No fixed version in the sources yet

SSVC decision points

CISA ADP · SSVC 2.0.3

Exploitation: None
Automatable: No
Technical impact: Partial

The decision (Track, Attend, Act) also depends on your mission and well-being impact; see CISA's SSVC guide.

Affected products

Vendor	Product	Affected versions	Fixed in	Status	Source
Lenovo	XClarity Controller	Refer to Mitigation strategy section in LEN-99936	—	No fix listed	CNA

XClarity Controller VendorLenovo Affected Refer to Mitigation strategy section in LEN-99936 Fixed in — No fix listed CNA

CPE configurations NVD · 221

CPE	Versions	Role	Vendor
cpe:2.3:o:lenovo:thinkagile_hx5530_firmware::::::::	before 2.93_afbt30p	Vulnerable	Lenovo
cpe:2.3:h:lenovo:thinkagile_hx5530:-:::::::*	not specified by NVD	Running on	Lenovo
cpe:2.3:o:lenovo:thinkagile_hx7530_firmware::::::::	before 2.93_afbt30p	Vulnerable	Lenovo
cpe:2.3:h:lenovo:thinkagile_hx7530:-:::::::*	not specified by NVD	Running on	Lenovo
cpe:2.3:o:lenovo:thinkagile_vx3331_firmware::::::::	before 2.93_afbt30p	Vulnerable	Lenovo
cpe:2.3:h:lenovo:thinkagile_vx3331:-:::::::*	not specified by NVD	Running on	Lenovo
cpe:2.3:o:lenovo:thinkagile_hx_enclosure_firmware::::::::	before 3.72_tei388s	Vulnerable	Lenovo
cpe:2.3:h:lenovo:thinkagile_hx_enclosure:-:::::::*	not specified by NVD	Running on	Lenovo
cpe:2.3:o:lenovo:thinkagile_hx1021_firmware::::::::	before 3.72_tei388s	Vulnerable	Lenovo
cpe:2.3:h:lenovo:thinkagile_hx1021:-:::::::*	not specified by NVD	Running on	Lenovo

cpe:2.3:o:lenovo:thinkagile_hx5530_firmware:*:*:*:*:*:*:*:* Versions before 2.93_afbt30p Vulnerable ·Lenovo
cpe:2.3:h:lenovo:thinkagile_hx5530:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Lenovo
cpe:2.3:o:lenovo:thinkagile_hx7530_firmware:*:*:*:*:*:*:*:* Versions before 2.93_afbt30p Vulnerable ·Lenovo
cpe:2.3:h:lenovo:thinkagile_hx7530:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Lenovo
cpe:2.3:o:lenovo:thinkagile_vx3331_firmware:*:*:*:*:*:*:*:* Versions before 2.93_afbt30p Vulnerable ·Lenovo
cpe:2.3:h:lenovo:thinkagile_vx3331:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Lenovo
cpe:2.3:o:lenovo:thinkagile_hx_enclosure_firmware:*:*:*:*:*:*:*:* Versions before 3.72_tei388s Vulnerable ·Lenovo
cpe:2.3:h:lenovo:thinkagile_hx_enclosure:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Lenovo
cpe:2.3:o:lenovo:thinkagile_hx1021_firmware:*:*:*:*:*:*:*:* Versions before 3.72_tei388s Vulnerable ·Lenovo
cpe:2.3:h:lenovo:thinkagile_hx1021:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Lenovo

Show 211 more CPE

CPE	Versions	Role	Vendor
cpe:2.3:o:lenovo:thinkagile_hx1320_firmware::::::::	before 8.88_cdi3a4a	Vulnerable	Lenovo
cpe:2.3:h:lenovo:thinkagile_hx1320:-:::::::*	not specified by NVD	Running on	Lenovo
cpe:2.3:o:lenovo:thinkagile_hx1321_firmware::::::::	before 8.88_cdi3a4a	Vulnerable	Lenovo
cpe:2.3:h:lenovo:thinkagile_hx1321:-:::::::*	not specified by NVD	Running on	Lenovo
cpe:2.3:o:lenovo:thinkagile_hx1331_firmware::::::::	before 2.93_afbt30p	Vulnerable	Lenovo
cpe:2.3:h:lenovo:thinkagile_hx1331:-:::::::*	not specified by NVD	Running on	Lenovo
cpe:2.3:o:lenovo:thinkagile_hx1520-r_firmware::::::::	before 8.88_cdi3a4a	Vulnerable	Lenovo
cpe:2.3:h:lenovo:thinkagile_hx1520-r:-:::::::*	not specified by NVD	Running on	Lenovo
cpe:2.3:o:lenovo:thinkagile_hx1521-r_firmware::::::::	before 8.88_cdi3a4a	Vulnerable	Lenovo
cpe:2.3:h:lenovo:thinkagile_hx1521-r:-:::::::*	not specified by NVD	Running on	Lenovo
cpe:2.3:o:lenovo:thinkagile_hx2320-e_firmware::::::::	before 8.88_cdi3a4a	Vulnerable	Lenovo
cpe:2.3:h:lenovo:thinkagile_hx2320-e:-:::::::*	not specified by NVD	Running on	Lenovo
cpe:2.3:o:lenovo:thinkagile_hx2321_firmware::::::::	before 8.88_cdi3a4a	Vulnerable	Lenovo
cpe:2.3:h:lenovo:thinkagile_hx2321:-:::::::*	not specified by NVD	Running on	Lenovo
cpe:2.3:o:lenovo:thinkagile_hx2330_firmware::::::::	before 2.93_afbt30p	Vulnerable	Lenovo
cpe:2.3:o:lenovo:thinkagile_hx2330_firmware:2.93_afbt30p:::::::*	2.93_afbt30p	Vulnerable	Lenovo
cpe:2.3:h:lenovo:thinkagile_hx2330:-:::::::*	not specified by NVD	Running on	Lenovo
cpe:2.3:o:lenovo:thinkagile_hx2331_firmware::::::::	before 2.93_afbt30p	Vulnerable	Lenovo
cpe:2.3:h:lenovo:thinkagile_hx2331:-:::::::*	not specified by NVD	Running on	Lenovo
cpe:2.3:o:lenovo:thinkagile_hx2720-e_firmware::::::::	before 3.72_tei388s	Vulnerable	Lenovo
cpe:2.3:h:lenovo:thinkagile_hx2720-e:-:::::::*	not specified by NVD	Running on	Lenovo
cpe:2.3:o:lenovo:thinkagile_hx3320_firmware::::::::	before 8.88_cdi3a4a	Vulnerable	Lenovo
cpe:2.3:h:lenovo:thinkagile_hx3320:-:::::::*	not specified by NVD	Running on	Lenovo
cpe:2.3:o:lenovo:thinkagile_hx3321_firmware::::::::	before 8.88_cdi3a4a	Vulnerable	Lenovo
cpe:2.3:h:lenovo:thinkagile_hx3321:-:::::::*	not specified by NVD	Running on	Lenovo
cpe:2.3:o:lenovo:thinkagile_hx3330_firmware::::::::	before 2.93_afbt30p	Vulnerable	Lenovo
cpe:2.3:h:lenovo:thinkagile_hx3330:-:::::::*	not specified by NVD	Running on	Lenovo
cpe:2.3:o:lenovo:thinkagile_hx3331_firmware::::::::	before 2.93_afbt30p	Vulnerable	Lenovo
cpe:2.3:h:lenovo:thinkagile_hx3331:-:::::::*	not specified by NVD	Running on	Lenovo
cpe:2.3:o:lenovo:thinkagile_hx3331_firmware::::::::	before 4.71_d8bt48p	Vulnerable	Lenovo
cpe:2.3:o:lenovo:thinkagile_hx3375_firmware::::::::	before 4.71_d8bt48p	Vulnerable	Lenovo
cpe:2.3:h:lenovo:thinkagile_hx3375:-:::::::*	not specified by NVD	Running on	Lenovo
cpe:2.3:o:lenovo:thinkagile_hx3376_firmware::::::::	before 8.88_cdi3a4a	Vulnerable	Lenovo
cpe:2.3:h:lenovo:thinkagile_hx3376:-:::::::*	not specified by NVD	Running on	Lenovo
cpe:2.3:o:lenovo:thinkagile_hx3520-g_firmware::::::::	before 8.88_cdi3a4a	Vulnerable	Lenovo
cpe:2.3:h:lenovo:thinkagile_hx3520-g:-:::::::*	not specified by NVD	Running on	Lenovo
cpe:2.3:o:lenovo:thinkagile_hx3521-g_firmware::::::::	before 3.72_tei388s	Vulnerable	Lenovo
cpe:2.3:h:lenovo:thinkagile_hx3521-g:-:::::::*	not specified by NVD	Running on	Lenovo
cpe:2.3:o:lenovo:thinkagile_hx3720_firmware::::::::	before 3.72_tei388s	Vulnerable	Lenovo
cpe:2.3:h:lenovo:thinkagile_hx3720:-:::::::*	not specified by NVD	Running on	Lenovo
cpe:2.3:o:lenovo:thinkagile_hx3721_firmware::::::::	before 8.88_cdi3a4a	Vulnerable	Lenovo
cpe:2.3:h:lenovo:thinkagile_hx3721:-:::::::*	not specified by NVD	Running on	Lenovo
cpe:2.3:o:lenovo:thinkagile_hx5520_firmware::::::::	before 8.88_cdi3a4a	Vulnerable	Lenovo
cpe:2.3:h:lenovo:thinkagile_hx5520:-:::::::*	not specified by NVD	Running on	Lenovo
cpe:2.3:o:lenovo:thinkagile_hx5520-c_firmware::::::::	before 8.88_cdi3a4a	Vulnerable	Lenovo
cpe:2.3:h:lenovo:thinkagile_hx5520-c:-:::::::*	not specified by NVD	Running on	Lenovo
cpe:2.3:o:lenovo:thinkagile_hx5521_firmware::::::::	before 8.88_cdi3a4a	Vulnerable	Lenovo
cpe:2.3:h:lenovo:thinkagile_hx5521:-:::::::*	not specified by NVD	Running on	Lenovo
cpe:2.3:o:lenovo:thinkagile_hx5521-c_firmware::::::::	before 2.93_afbt30p	Vulnerable	Lenovo
cpe:2.3:h:lenovo:thinkagile_hx5521-c:-:::::::*	not specified by NVD	Running on	Lenovo
cpe:2.3:o:lenovo:thinkagile_hx5531_firmware::::::::	before 8.88_cdi3a4a	Vulnerable	Lenovo
cpe:2.3:h:lenovo:thinkagile_hx5531:-:::::::*	not specified by NVD	Running on	Lenovo
cpe:2.3:o:lenovo:thinkagile_hx7520_firmware::::::::	before 8.88_cdi3a4a	Vulnerable	Lenovo
cpe:2.3:h:lenovo:thinkagile_hx7520:-:::::::*	not specified by NVD	Running on	Lenovo
cpe:2.3:o:lenovo:thinkagile_hx7521_firmware::::::::	before 2.93_afbt30p	Vulnerable	Lenovo
cpe:2.3:h:lenovo:thinkagile_hx7521:-:::::::*	not specified by NVD	Running on	Lenovo
cpe:2.3:o:lenovo:thinkagile_hx7531_firmware::::::::	before 2.93_afbt30p	Vulnerable	Lenovo
cpe:2.3:h:lenovo:thinkagile_hx7531:-:::::::*	not specified by NVD	Running on	Lenovo
cpe:2.3:o:lenovo:thinkagile_hx7531_firmware::::::::	before 2.75_psi348s	Vulnerable	Lenovo
cpe:2.3:o:lenovo:thinkagile_hx7820_firmware::::::::	before 2.75_psi348s	Vulnerable	Lenovo
cpe:2.3:h:lenovo:thinkagile_hx7820:-:::::::*	not specified by NVD	Running on	Lenovo
cpe:2.3:o:lenovo:thinkagile_hx7821_firmware::::::::	before 3.72_tei388s	Vulnerable	Lenovo
cpe:2.3:h:lenovo:thinkagile_hx7821:-:::::::*	not specified by NVD	Running on	Lenovo
cpe:2.3:o:lenovo:thinkagile_mx1020_firmware::::::::	before 2.93_afbt30p	Vulnerable	Lenovo
cpe:2.3:h:lenovo:thinkagile_mx1020:-:::::::*	not specified by NVD	Running on	Lenovo
cpe:2.3:o:lenovo:thinkagile_mx3330-f_firmware::::::::	before 2.93_afbt30p	Vulnerable	Lenovo
cpe:2.3:h:lenovo:thinkagile_mx3330-f:-:::::::*	not specified by NVD	Running on	Lenovo
cpe:2.3:o:lenovo:thinkagile_mx3330-h_firmware::::::::	before 2.93_afbt30p	Vulnerable	Lenovo
cpe:2.3:h:lenovo:thinkagile_mx3330-h:-:::::::*	not specified by NVD	Running on	Lenovo
cpe:2.3:o:lenovo:thinkagile_mx3331-f_firmware::::::::	before 2.93_afbt30p	Vulnerable	Lenovo
cpe:2.3:h:lenovo:thinkagile_mx3331-f:-:::::::*	not specified by NVD	Running on	Lenovo
cpe:2.3:o:lenovo:thinkagile_mx3331-h_firmware::::::::	before 2.93_afbt30p	Vulnerable	Lenovo
cpe:2.3:h:lenovo:thinkagile_mx3331-h:-:::::::*	not specified by NVD	Running on	Lenovo
cpe:2.3:o:lenovo:thinkagile_mx3530_f_firmware::::::::	before 2.93_afbt30p	Vulnerable	Lenovo
cpe:2.3:h:lenovo:thinkagile_mx3530_f:-:::::::*	not specified by NVD	Running on	Lenovo
cpe:2.3:o:lenovo:thinkagile_mx3530-h_firmware::::::::	before 2.93_afbt30p	Vulnerable	Lenovo
cpe:2.3:h:lenovo:thinkagile_mx3530-h:-:::::::*	not specified by NVD	Running on	Lenovo
cpe:2.3:o:lenovo:thinkagile_mx3531_h_firmware::::::::	before 2.93_afbt30p	Vulnerable	Lenovo
cpe:2.3:h:lenovo:thinkagile_mx3531_h:-:::::::*	not specified by NVD	Running on	Lenovo
cpe:2.3:o:lenovo:thinkagile_mx3531-f_firmware::::::::	before 3.72_tei388s	Vulnerable	Lenovo
cpe:2.3:h:lenovo:thinkagile_mx3531-f:-:::::::*	not specified by NVD	Running on	Lenovo
cpe:2.3:o:lenovo:thinkagile_mx1021_on_se350_firmware::::::::	before 3.72_tei388s	Vulnerable	Lenovo
cpe:2.3:h:lenovo:thinkagile_mx1021_on_se350:-:::::::*	not specified by NVD	Running on	Lenovo
cpe:2.3:o:lenovo:thinkagile_vx_1se_firmware::::::::	before 3.72_tei388s	Vulnerable	Lenovo
cpe:2.3:h:lenovo:thinkagile_vx_1se:-:::::::*	not specified by NVD	Running on	Lenovo
cpe:2.3:o:lenovo:thinkagile_vx_2u4n_firmware::::::::	before 3.72_tei388s	Vulnerable	Lenovo
cpe:2.3:h:lenovo:thinkagile_vx_2u4n:-:::::::*	not specified by NVD	Running on	Lenovo
cpe:2.3:o:lenovo:thinkagile_vx_4u_firmware::::::::	before 2.75_psi348s	Vulnerable	Lenovo
cpe:2.3:h:lenovo:thinkagile_vx_4u:-:::::::*	not specified by NVD	Running on	Lenovo
cpe:2.3:o:lenovo:thinkagile_vx1320_firmware::::::::	before 3.72_tei388s	Vulnerable	Lenovo
cpe:2.3:h:lenovo:thinkagile_vx1320:-:::::::*	not specified by NVD	Running on	Lenovo
cpe:2.3:o:lenovo:thinkagile_vx2320_firmware::::::::	before 8.88_cdi3a4a	Vulnerable	Lenovo
cpe:2.3:h:lenovo:thinkagile_vx2320:-:::::::*	not specified by NVD	Running on	Lenovo
cpe:2.3:o:lenovo:thinkagile_vx2330_firmware::::::::	before 2.93_afbt30p	Vulnerable	Lenovo
cpe:2.3:h:lenovo:thinkagile_vx2330:-:::::::*	not specified by NVD	Running on	Lenovo
cpe:2.3:o:lenovo:thinkagile_vx3320_firmware::::::::	before 8.88_cdi3a4a	Vulnerable	Lenovo
cpe:2.3:h:lenovo:thinkagile_vx3320:-:::::::*	not specified by NVD	Running on	Lenovo
cpe:2.3:o:lenovo:thinkagile_vx3330_firmware::::::::	before 2.93_afbt30p	Vulnerable	Lenovo
cpe:2.3:h:lenovo:thinkagile_vx3330:-:::::::*	not specified by NVD	Running on	Lenovo
cpe:2.3:o:lenovo:thinkagile_vx3520-g_firmware::::::::	before 8.88_cdi3a4a	Vulnerable	Lenovo
cpe:2.3:h:lenovo:thinkagile_vx3520-g:-:::::::*	not specified by NVD	Running on	Lenovo
cpe:2.3:o:lenovo:thinkagile_vx3530-g_firmware::::::::	before 2.93_afbt30p	Vulnerable	Lenovo
cpe:2.3:h:lenovo:thinkagile_vx3530-g:-:::::::*	not specified by NVD	Running on	Lenovo
cpe:2.3:o:lenovo:thinkagile_vx3720_firmware::::::::	before 3.72_tei388s	Vulnerable	Lenovo
cpe:2.3:h:lenovo:thinkagile_vx3720:-:::::::*	not specified by NVD	Running on	Lenovo
cpe:2.3:o:lenovo:thinkagile_vx5520_firmware::::::::	before 8.88_cdi3a4a	Vulnerable	Lenovo
cpe:2.3:h:lenovo:thinkagile_vx5520:-:::::::*	not specified by NVD	Running on	Lenovo
cpe:2.3:o:lenovo:thinkagile_vx5530_firmware::::::::	before 2.93_afbt30p	Vulnerable	Lenovo
cpe:2.3:h:lenovo:thinkagile_vx5530:-:::::::*	not specified by NVD	Running on	Lenovo
cpe:2.3:o:lenovo:thinkagile_vx7320_n_firmware::::::::	before 8.88_cdi3a4a	Vulnerable	Lenovo
cpe:2.3:h:lenovo:thinkagile_vx7320_n:-:::::::*	not specified by NVD	Running on	Lenovo
cpe:2.3:o:lenovo:thinkagile_vx7330_firmware::::::::	before 2.93_afbt30p	Vulnerable	Lenovo
cpe:2.3:h:lenovo:thinkagile_vx7330:-:::::::*	not specified by NVD	Running on	Lenovo
cpe:2.3:o:lenovo:thinkagile_vx7520_firmware::::::::	before 8.88_cdi3a4a	Vulnerable	Lenovo
cpe:2.3:h:lenovo:thinkagile_vx7520:-:::::::*	not specified by NVD	Running on	Lenovo
cpe:2.3:o:lenovo:thinkagile_vx7520_n_firmware::::::::	before 8.88_cdi3a4a	Vulnerable	Lenovo
cpe:2.3:h:lenovo:thinkagile_vx7520_n:-:::::::*	not specified by NVD	Running on	Lenovo
cpe:2.3:o:lenovo:thinkagile_vx7530_firmware::::::::	before 2.93_afbt30p	Vulnerable	Lenovo
cpe:2.3:h:lenovo:thinkagile_vx7530:-:::::::*	not specified by NVD	Running on	Lenovo
cpe:2.3:o:lenovo:thinkagile_vx7531_firmware::::::::	before 2.93_afbt30p	Vulnerable	Lenovo
cpe:2.3:h:lenovo:thinkagile_vx7531:-:::::::*	not specified by NVD	Running on	Lenovo
cpe:2.3:o:lenovo:thinkagile_vx7820_firmware::::::::	before 2.75_psi348s	Vulnerable	Lenovo
cpe:2.3:h:lenovo:thinkagile_vx7820:-:::::::*	not specified by NVD	Running on	Lenovo
cpe:2.3:o:lenovo:thinkedge_se450__firmware::::::::	before 1.60_usx324o	Vulnerable	Lenovo
cpe:2.3:h:lenovo:thinkedge_se450_:-:::::::*	not specified by NVD	Running on	Lenovo
cpe:2.3:o:lenovo:thinkstation_p920_firmware::::::::	before 8.88_cdi3a4a	Vulnerable	Lenovo
cpe:2.3:h:lenovo:thinkstation_p920:-:::::::*	not specified by NVD	Running on	Lenovo
cpe:2.3:o:lenovo:thinksystem_sd530_firmware::::::::	before 3.72_tei388s	Vulnerable	Lenovo
cpe:2.3:h:lenovo:thinksystem_sd530:-:::::::*	not specified by NVD	Running on	Lenovo
cpe:2.3:o:lenovo:thinksystem_sd630_v2_firmware::::::::	before 2.60_tgbt42h	Vulnerable	Lenovo
cpe:2.3:h:lenovo:thinksystem_sd630_v2:-:::::::*	not specified by NVD	Running on	Lenovo
cpe:2.3:o:lenovo:thinksystem_sd650_firmware::::::::	before 3.72_tei388s	Vulnerable	Lenovo
cpe:2.3:h:lenovo:thinksystem_sd650:-:::::::*	not specified by NVD	Running on	Lenovo
cpe:2.3:o:lenovo:thinksystem_sd650_v2_firmware::::::::	before 2.60_tgbt42h	Vulnerable	Lenovo
cpe:2.3:h:lenovo:thinksystem_sd650_v2:-:::::::*	not specified by NVD	Running on	Lenovo
cpe:2.3:o:lenovo:thinksystem_sd650-n_v2_firmware::::::::	before 2.60_tgbt42h	Vulnerable	Lenovo
cpe:2.3:h:lenovo:thinksystem_sd650-n_v2:-:::::::*	not specified by NVD	Running on	Lenovo
cpe:2.3:o:lenovo:thinksystem_se350_firmware::::::::	before 3.72_tei388s	Vulnerable	Lenovo
cpe:2.3:h:lenovo:thinksystem_se350:-:::::::*	not specified by NVD	Running on	Lenovo
cpe:2.3:o:lenovo:thinksystem_sn550_firmware::::::::	before 3.72_tei388s	Vulnerable	Lenovo
cpe:2.3:h:lenovo:thinksystem_sn550:-:::::::*	not specified by NVD	Running on	Lenovo
cpe:2.3:o:lenovo:thinksystem_sn550_v2_firmware::::::::	before 2.60_tgbt42h	Vulnerable	Lenovo
cpe:2.3:h:lenovo:thinksystem_sn550_v2:-:::::::*	not specified by NVD	Running on	Lenovo
cpe:2.3:o:lenovo:thinksystem_sn850_firmware::::::::	before 3.72_tei388s	Vulnerable	Lenovo
cpe:2.3:h:lenovo:thinksystem_sn850:-:::::::*	not specified by NVD	Running on	Lenovo
cpe:2.3:o:lenovo:thinksystem_sr150_firmware::::::::	before 3.72_tei388s	Vulnerable	Lenovo
cpe:2.3:h:lenovo:thinksystem_sr150:-:::::::*	not specified by NVD	Running on	Lenovo
cpe:2.3:o:lenovo:thinksystem_sr158_firmware::::::::	before 3.72_tei388s	Vulnerable	Lenovo
cpe:2.3:h:lenovo:thinksystem_sr158:-:::::::*	not specified by NVD	Running on	Lenovo
cpe:2.3:o:lenovo:thinksystem_sr250_firmware::::::::	before 3.72_tei388s	Vulnerable	Lenovo
cpe:2.3:h:lenovo:thinksystem_sr250:-:::::::*	not specified by NVD	Running on	Lenovo
cpe:2.3:o:lenovo:thinksystem_sr250_v2_firmware::::::::	before 2.60_tgbt42h	Vulnerable	Lenovo
cpe:2.3:h:lenovo:thinksystem_sr250_v2:-:::::::*	not specified by NVD	Running on	Lenovo
cpe:2.3:o:lenovo:thinksystem_sr258_firmware::::::::	before 3.72_tei388s	Vulnerable	Lenovo
cpe:2.3:h:lenovo:thinksystem_sr258:-:::::::*	not specified by NVD	Running on	Lenovo
cpe:2.3:o:lenovo:thinksystem_sr258_v2_firmware::::::::	before 2.60_tgbt42h	Vulnerable	Lenovo
cpe:2.3:h:lenovo:thinksystem_sr258_v2:-:::::::*	not specified by NVD	Running on	Lenovo
cpe:2.3:o:lenovo:thinksystem_sr530_firmware::::::::	before 8.88_cdi3a4a	Vulnerable	Lenovo
cpe:2.3:h:lenovo:thinksystem_sr530:-:::::::*	not specified by NVD	Running on	Lenovo
cpe:2.3:o:lenovo:thinksystem_sr550_firmware::::::::	before 8.88_cdi3a4a	Vulnerable	Lenovo
cpe:2.3:h:lenovo:thinksystem_sr550:-:::::::*	not specified by NVD	Running on	Lenovo
cpe:2.3:o:lenovo:thinksystem_sr570_firmware::::::::	before 8.88_cdi3a4a	Vulnerable	Lenovo
cpe:2.3:h:lenovo:thinksystem_sr570:-:::::::*	not specified by NVD	Running on	Lenovo
cpe:2.3:o:lenovo:thinksystem_sr590_firmware::::::::	before 8.88_cdi3a4a	Vulnerable	Lenovo
cpe:2.3:h:lenovo:thinksystem_sr590:-:::::::*	not specified by NVD	Running on	Lenovo
cpe:2.3:o:lenovo:thinksystem_sr630_firmware::::::::	before 8.88_cdi3a4a	Vulnerable	Lenovo
cpe:2.3:h:lenovo:thinksystem_sr630:-:::::::*	not specified by NVD	Running on	Lenovo
cpe:2.3:o:lenovo:thinksystem_sr630_v2_firmware::::::::	before 2.93_afbt30p	Vulnerable	Lenovo
cpe:2.3:h:lenovo:thinksystem_sr630_v2:-:::::::*	not specified by NVD	Running on	Lenovo
cpe:2.3:o:lenovo:thinksystem_sr645_firmware::::::::	before 4.71_d8bt48p	Vulnerable	Lenovo
cpe:2.3:h:lenovo:thinksystem_sr645:-:::::::*	not specified by NVD	Running on	Lenovo
cpe:2.3:o:lenovo:thinksystem_sr645_v3_firmware::::::::	before 4.71_d8bt48p	Vulnerable	Lenovo
cpe:2.3:h:lenovo:thinksystem_sr645_v3:-:::::::*	not specified by NVD	Running on	Lenovo
cpe:2.3:o:lenovo:thinksystem_sr650_firmware::::::::	before 8.88_cdi3a4a	Vulnerable	Lenovo
cpe:2.3:h:lenovo:thinksystem_sr650:-:::::::*	not specified by NVD	Running on	Lenovo
cpe:2.3:o:lenovo:thinksystem_sr650_v2_firmware::::::::	before 2.93_afbt30p	Vulnerable	Lenovo
cpe:2.3:h:lenovo:thinksystem_sr650_v2:-:::::::*	not specified by NVD	Running on	Lenovo
cpe:2.3:o:lenovo:thinksystem_sr665_firmware::::::::	before 4.71_d8bt48p	Vulnerable	Lenovo
cpe:2.3:h:lenovo:thinksystem_sr665:-:::::::*	not specified by NVD	Running on	Lenovo
cpe:2.3:o:lenovo:thinksystem_sr665_v3_firmware::::::::	before 4.71_d8bt48p	Vulnerable	Lenovo
cpe:2.3:h:lenovo:thinksystem_sr665_v3:-:::::::*	not specified by NVD	Running on	Lenovo
cpe:2.3:o:lenovo:thinksystem_sr670_firmware::::::::	before 3.72_tei388s	Vulnerable	Lenovo
cpe:2.3:h:lenovo:thinksystem_sr670:-:::::::*	not specified by NVD	Running on	Lenovo
cpe:2.3:o:lenovo:thinksystem_sr670_v2_firmware::::::::	before 2.60_tgbt42h	Vulnerable	Lenovo
cpe:2.3:h:lenovo:thinksystem_sr670_v2:-:::::::*	not specified by NVD	Running on	Lenovo
cpe:2.3:o:lenovo:thinksystem_sr850_firmware::::::::	before 3.72_tei388s	Vulnerable	Lenovo
cpe:2.3:h:lenovo:thinksystem_sr850:-:::::::*	not specified by NVD	Running on	Lenovo
cpe:2.3:o:lenovo:thinksystem_sr850_v2_firmware::::::::	before 2.60_tgbt42h	Vulnerable	Lenovo
cpe:2.3:h:lenovo:thinksystem_sr850_v2:-:::::::*	not specified by NVD	Running on	Lenovo
cpe:2.3:o:lenovo:thinksystem_sr850p_firmware::::::::	before 3.72_tei388s	Vulnerable	Lenovo
cpe:2.3:h:lenovo:thinksystem_sr850p:-:::::::*	not specified by NVD	Running on	Lenovo
cpe:2.3:o:lenovo:thinksystem_sr860_firmware::::::::	before 3.72_tei388s	Vulnerable	Lenovo
cpe:2.3:h:lenovo:thinksystem_sr860:-:::::::*	not specified by NVD	Running on	Lenovo
cpe:2.3:o:lenovo:thinksystem_sr860_v2_firmware::::::::	before 2.60_tgbt42h	Vulnerable	Lenovo
cpe:2.3:h:lenovo:thinksystem_sr860_v2:-:::::::*	not specified by NVD	Running on	Lenovo
cpe:2.3:o:lenovo:thinksystem_sr950_firmware::::::::	before 2.75_psi348s	Vulnerable	Lenovo
cpe:2.3:h:lenovo:thinksystem_sr950:-:::::::*	not specified by NVD	Running on	Lenovo
cpe:2.3:o:lenovo:thinksystem_st250_firmware::::::::	before 3.72_tei388s	Vulnerable	Lenovo
cpe:2.3:h:lenovo:thinksystem_st250:-:::::::*	not specified by NVD	Running on	Lenovo
cpe:2.3:o:lenovo:thinksystem_st250_v2_firmware::::::::	before 2.60_tgbt42h	Vulnerable	Lenovo
cpe:2.3:h:lenovo:thinksystem_st250_v2:-:::::::*	not specified by NVD	Running on	Lenovo
cpe:2.3:o:lenovo:thinksystem_st258_firmware::::::::	before 3.72_tei388s	Vulnerable	Lenovo
cpe:2.3:h:lenovo:thinksystem_st258:-:::::::*	not specified by NVD	Running on	Lenovo
cpe:2.3:o:lenovo:thinksystem_st258_v2_firmware::::::::	before 2.60_tgbt42h	Vulnerable	Lenovo
cpe:2.3:h:lenovo:thinksystem_st258_v2:-:::::::*	not specified by NVD	Running on	Lenovo
cpe:2.3:o:lenovo:thinksystem_st550_firmware::::::::	before 8.88_cdi3a4a	Vulnerable	Lenovo
cpe:2.3:h:lenovo:thinksystem_st550:-:::::::*	not specified by NVD	Running on	Lenovo
cpe:2.3:o:lenovo:thinksystem_st650_v2_firmware::::::::	before 2.60_tgbt42h	Vulnerable	Lenovo
cpe:2.3:h:lenovo:thinksystem_st650_v2:-:::::::*	not specified by NVD	Running on	Lenovo
cpe:2.3:o:lenovo:thinksystem_st658_v2_firmware::::::::	before 2.60_tgbt42h	Vulnerable	Lenovo
cpe:2.3:h:lenovo:thinksystem_st658_v2:-:::::::*	not specified by NVD	Running on	Lenovo

cpe:2.3:o:lenovo:thinkagile_hx1320_firmware:*:*:*:*:*:*:*:* Versions before 8.88_cdi3a4a Vulnerable ·Lenovo
cpe:2.3:h:lenovo:thinkagile_hx1320:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Lenovo
cpe:2.3:o:lenovo:thinkagile_hx1321_firmware:*:*:*:*:*:*:*:* Versions before 8.88_cdi3a4a Vulnerable ·Lenovo
cpe:2.3:h:lenovo:thinkagile_hx1321:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Lenovo
cpe:2.3:o:lenovo:thinkagile_hx1331_firmware:*:*:*:*:*:*:*:* Versions before 2.93_afbt30p Vulnerable ·Lenovo
cpe:2.3:h:lenovo:thinkagile_hx1331:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Lenovo
cpe:2.3:o:lenovo:thinkagile_hx1520-r_firmware:*:*:*:*:*:*:*:* Versions before 8.88_cdi3a4a Vulnerable ·Lenovo
cpe:2.3:h:lenovo:thinkagile_hx1520-r:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Lenovo
cpe:2.3:o:lenovo:thinkagile_hx1521-r_firmware:*:*:*:*:*:*:*:* Versions before 8.88_cdi3a4a Vulnerable ·Lenovo
cpe:2.3:h:lenovo:thinkagile_hx1521-r:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Lenovo
cpe:2.3:o:lenovo:thinkagile_hx2320-e_firmware:*:*:*:*:*:*:*:* Versions before 8.88_cdi3a4a Vulnerable ·Lenovo
cpe:2.3:h:lenovo:thinkagile_hx2320-e:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Lenovo
cpe:2.3:o:lenovo:thinkagile_hx2321_firmware:*:*:*:*:*:*:*:* Versions before 8.88_cdi3a4a Vulnerable ·Lenovo
cpe:2.3:h:lenovo:thinkagile_hx2321:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Lenovo
cpe:2.3:o:lenovo:thinkagile_hx2330_firmware:*:*:*:*:*:*:*:* Versions before 2.93_afbt30p Vulnerable ·Lenovo
cpe:2.3:o:lenovo:thinkagile_hx2330_firmware:2.93_afbt30p:*:*:*:*:*:*:* Versions 2.93_afbt30p Vulnerable ·Lenovo
cpe:2.3:h:lenovo:thinkagile_hx2330:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Lenovo
cpe:2.3:o:lenovo:thinkagile_hx2331_firmware:*:*:*:*:*:*:*:* Versions before 2.93_afbt30p Vulnerable ·Lenovo
cpe:2.3:h:lenovo:thinkagile_hx2331:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Lenovo
cpe:2.3:o:lenovo:thinkagile_hx2720-e_firmware:*:*:*:*:*:*:*:* Versions before 3.72_tei388s Vulnerable ·Lenovo
cpe:2.3:h:lenovo:thinkagile_hx2720-e:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Lenovo
cpe:2.3:o:lenovo:thinkagile_hx3320_firmware:*:*:*:*:*:*:*:* Versions before 8.88_cdi3a4a Vulnerable ·Lenovo
cpe:2.3:h:lenovo:thinkagile_hx3320:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Lenovo
cpe:2.3:o:lenovo:thinkagile_hx3321_firmware:*:*:*:*:*:*:*:* Versions before 8.88_cdi3a4a Vulnerable ·Lenovo
cpe:2.3:h:lenovo:thinkagile_hx3321:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Lenovo
cpe:2.3:o:lenovo:thinkagile_hx3330_firmware:*:*:*:*:*:*:*:* Versions before 2.93_afbt30p Vulnerable ·Lenovo
cpe:2.3:h:lenovo:thinkagile_hx3330:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Lenovo
cpe:2.3:o:lenovo:thinkagile_hx3331_firmware:*:*:*:*:*:*:*:* Versions before 2.93_afbt30p Vulnerable ·Lenovo
cpe:2.3:h:lenovo:thinkagile_hx3331:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Lenovo
cpe:2.3:o:lenovo:thinkagile_hx3331_firmware:*:*:*:*:*:*:*:* Versions before 4.71_d8bt48p Vulnerable ·Lenovo
cpe:2.3:o:lenovo:thinkagile_hx3375_firmware:*:*:*:*:*:*:*:* Versions before 4.71_d8bt48p Vulnerable ·Lenovo
cpe:2.3:h:lenovo:thinkagile_hx3375:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Lenovo
cpe:2.3:o:lenovo:thinkagile_hx3376_firmware:*:*:*:*:*:*:*:* Versions before 8.88_cdi3a4a Vulnerable ·Lenovo
cpe:2.3:h:lenovo:thinkagile_hx3376:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Lenovo
cpe:2.3:o:lenovo:thinkagile_hx3520-g_firmware:*:*:*:*:*:*:*:* Versions before 8.88_cdi3a4a Vulnerable ·Lenovo
cpe:2.3:h:lenovo:thinkagile_hx3520-g:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Lenovo
cpe:2.3:o:lenovo:thinkagile_hx3521-g_firmware:*:*:*:*:*:*:*:* Versions before 3.72_tei388s Vulnerable ·Lenovo
cpe:2.3:h:lenovo:thinkagile_hx3521-g:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Lenovo
cpe:2.3:o:lenovo:thinkagile_hx3720_firmware:*:*:*:*:*:*:*:* Versions before 3.72_tei388s Vulnerable ·Lenovo
cpe:2.3:h:lenovo:thinkagile_hx3720:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Lenovo
cpe:2.3:o:lenovo:thinkagile_hx3721_firmware:*:*:*:*:*:*:*:* Versions before 8.88_cdi3a4a Vulnerable ·Lenovo
cpe:2.3:h:lenovo:thinkagile_hx3721:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Lenovo
cpe:2.3:o:lenovo:thinkagile_hx5520_firmware:*:*:*:*:*:*:*:* Versions before 8.88_cdi3a4a Vulnerable ·Lenovo
cpe:2.3:h:lenovo:thinkagile_hx5520:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Lenovo
cpe:2.3:o:lenovo:thinkagile_hx5520-c_firmware:*:*:*:*:*:*:*:* Versions before 8.88_cdi3a4a Vulnerable ·Lenovo
cpe:2.3:h:lenovo:thinkagile_hx5520-c:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Lenovo
cpe:2.3:o:lenovo:thinkagile_hx5521_firmware:*:*:*:*:*:*:*:* Versions before 8.88_cdi3a4a Vulnerable ·Lenovo
cpe:2.3:h:lenovo:thinkagile_hx5521:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Lenovo
cpe:2.3:o:lenovo:thinkagile_hx5521-c_firmware:*:*:*:*:*:*:*:* Versions before 2.93_afbt30p Vulnerable ·Lenovo
cpe:2.3:h:lenovo:thinkagile_hx5521-c:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Lenovo
cpe:2.3:o:lenovo:thinkagile_hx5531_firmware:*:*:*:*:*:*:*:* Versions before 8.88_cdi3a4a Vulnerable ·Lenovo
cpe:2.3:h:lenovo:thinkagile_hx5531:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Lenovo
cpe:2.3:o:lenovo:thinkagile_hx7520_firmware:*:*:*:*:*:*:*:* Versions before 8.88_cdi3a4a Vulnerable ·Lenovo
cpe:2.3:h:lenovo:thinkagile_hx7520:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Lenovo
cpe:2.3:o:lenovo:thinkagile_hx7521_firmware:*:*:*:*:*:*:*:* Versions before 2.93_afbt30p Vulnerable ·Lenovo
cpe:2.3:h:lenovo:thinkagile_hx7521:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Lenovo
cpe:2.3:o:lenovo:thinkagile_hx7531_firmware:*:*:*:*:*:*:*:* Versions before 2.93_afbt30p Vulnerable ·Lenovo
cpe:2.3:h:lenovo:thinkagile_hx7531:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Lenovo
cpe:2.3:o:lenovo:thinkagile_hx7531_firmware:*:*:*:*:*:*:*:* Versions before 2.75_psi348s Vulnerable ·Lenovo
cpe:2.3:o:lenovo:thinkagile_hx7820_firmware:*:*:*:*:*:*:*:* Versions before 2.75_psi348s Vulnerable ·Lenovo
cpe:2.3:h:lenovo:thinkagile_hx7820:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Lenovo
cpe:2.3:o:lenovo:thinkagile_hx7821_firmware:*:*:*:*:*:*:*:* Versions before 3.72_tei388s Vulnerable ·Lenovo
cpe:2.3:h:lenovo:thinkagile_hx7821:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Lenovo
cpe:2.3:o:lenovo:thinkagile_mx1020_firmware:*:*:*:*:*:*:*:* Versions before 2.93_afbt30p Vulnerable ·Lenovo
cpe:2.3:h:lenovo:thinkagile_mx1020:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Lenovo
cpe:2.3:o:lenovo:thinkagile_mx3330-f_firmware:*:*:*:*:*:*:*:* Versions before 2.93_afbt30p Vulnerable ·Lenovo
cpe:2.3:h:lenovo:thinkagile_mx3330-f:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Lenovo
cpe:2.3:o:lenovo:thinkagile_mx3330-h_firmware:*:*:*:*:*:*:*:* Versions before 2.93_afbt30p Vulnerable ·Lenovo
cpe:2.3:h:lenovo:thinkagile_mx3330-h:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Lenovo
cpe:2.3:o:lenovo:thinkagile_mx3331-f_firmware:*:*:*:*:*:*:*:* Versions before 2.93_afbt30p Vulnerable ·Lenovo
cpe:2.3:h:lenovo:thinkagile_mx3331-f:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Lenovo
cpe:2.3:o:lenovo:thinkagile_mx3331-h_firmware:*:*:*:*:*:*:*:* Versions before 2.93_afbt30p Vulnerable ·Lenovo
cpe:2.3:h:lenovo:thinkagile_mx3331-h:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Lenovo
cpe:2.3:o:lenovo:thinkagile_mx3530_f_firmware:*:*:*:*:*:*:*:* Versions before 2.93_afbt30p Vulnerable ·Lenovo
cpe:2.3:h:lenovo:thinkagile_mx3530_f:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Lenovo
cpe:2.3:o:lenovo:thinkagile_mx3530-h_firmware:*:*:*:*:*:*:*:* Versions before 2.93_afbt30p Vulnerable ·Lenovo
cpe:2.3:h:lenovo:thinkagile_mx3530-h:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Lenovo
cpe:2.3:o:lenovo:thinkagile_mx3531_h_firmware:*:*:*:*:*:*:*:* Versions before 2.93_afbt30p Vulnerable ·Lenovo
cpe:2.3:h:lenovo:thinkagile_mx3531_h:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Lenovo
cpe:2.3:o:lenovo:thinkagile_mx3531-f_firmware:*:*:*:*:*:*:*:* Versions before 3.72_tei388s Vulnerable ·Lenovo
cpe:2.3:h:lenovo:thinkagile_mx3531-f:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Lenovo
cpe:2.3:o:lenovo:thinkagile_mx1021_on_se350_firmware:*:*:*:*:*:*:*:* Versions before 3.72_tei388s Vulnerable ·Lenovo
cpe:2.3:h:lenovo:thinkagile_mx1021_on_se350:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Lenovo
cpe:2.3:o:lenovo:thinkagile_vx_1se_firmware:*:*:*:*:*:*:*:* Versions before 3.72_tei388s Vulnerable ·Lenovo
cpe:2.3:h:lenovo:thinkagile_vx_1se:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Lenovo
cpe:2.3:o:lenovo:thinkagile_vx_2u4n_firmware:*:*:*:*:*:*:*:* Versions before 3.72_tei388s Vulnerable ·Lenovo
cpe:2.3:h:lenovo:thinkagile_vx_2u4n:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Lenovo
cpe:2.3:o:lenovo:thinkagile_vx_4u_firmware:*:*:*:*:*:*:*:* Versions before 2.75_psi348s Vulnerable ·Lenovo
cpe:2.3:h:lenovo:thinkagile_vx_4u:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Lenovo
cpe:2.3:o:lenovo:thinkagile_vx1320_firmware:*:*:*:*:*:*:*:* Versions before 3.72_tei388s Vulnerable ·Lenovo
cpe:2.3:h:lenovo:thinkagile_vx1320:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Lenovo
cpe:2.3:o:lenovo:thinkagile_vx2320_firmware:*:*:*:*:*:*:*:* Versions before 8.88_cdi3a4a Vulnerable ·Lenovo
cpe:2.3:h:lenovo:thinkagile_vx2320:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Lenovo
cpe:2.3:o:lenovo:thinkagile_vx2330_firmware:*:*:*:*:*:*:*:* Versions before 2.93_afbt30p Vulnerable ·Lenovo
cpe:2.3:h:lenovo:thinkagile_vx2330:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Lenovo
cpe:2.3:o:lenovo:thinkagile_vx3320_firmware:*:*:*:*:*:*:*:* Versions before 8.88_cdi3a4a Vulnerable ·Lenovo
cpe:2.3:h:lenovo:thinkagile_vx3320:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Lenovo
cpe:2.3:o:lenovo:thinkagile_vx3330_firmware:*:*:*:*:*:*:*:* Versions before 2.93_afbt30p Vulnerable ·Lenovo
cpe:2.3:h:lenovo:thinkagile_vx3330:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Lenovo
cpe:2.3:o:lenovo:thinkagile_vx3520-g_firmware:*:*:*:*:*:*:*:* Versions before 8.88_cdi3a4a Vulnerable ·Lenovo
cpe:2.3:h:lenovo:thinkagile_vx3520-g:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Lenovo
cpe:2.3:o:lenovo:thinkagile_vx3530-g_firmware:*:*:*:*:*:*:*:* Versions before 2.93_afbt30p Vulnerable ·Lenovo
cpe:2.3:h:lenovo:thinkagile_vx3530-g:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Lenovo
cpe:2.3:o:lenovo:thinkagile_vx3720_firmware:*:*:*:*:*:*:*:* Versions before 3.72_tei388s Vulnerable ·Lenovo
cpe:2.3:h:lenovo:thinkagile_vx3720:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Lenovo
cpe:2.3:o:lenovo:thinkagile_vx5520_firmware:*:*:*:*:*:*:*:* Versions before 8.88_cdi3a4a Vulnerable ·Lenovo
cpe:2.3:h:lenovo:thinkagile_vx5520:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Lenovo
cpe:2.3:o:lenovo:thinkagile_vx5530_firmware:*:*:*:*:*:*:*:* Versions before 2.93_afbt30p Vulnerable ·Lenovo
cpe:2.3:h:lenovo:thinkagile_vx5530:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Lenovo
cpe:2.3:o:lenovo:thinkagile_vx7320_n_firmware:*:*:*:*:*:*:*:* Versions before 8.88_cdi3a4a Vulnerable ·Lenovo
cpe:2.3:h:lenovo:thinkagile_vx7320_n:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Lenovo
cpe:2.3:o:lenovo:thinkagile_vx7330_firmware:*:*:*:*:*:*:*:* Versions before 2.93_afbt30p Vulnerable ·Lenovo
cpe:2.3:h:lenovo:thinkagile_vx7330:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Lenovo
cpe:2.3:o:lenovo:thinkagile_vx7520_firmware:*:*:*:*:*:*:*:* Versions before 8.88_cdi3a4a Vulnerable ·Lenovo
cpe:2.3:h:lenovo:thinkagile_vx7520:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Lenovo
cpe:2.3:o:lenovo:thinkagile_vx7520_n_firmware:*:*:*:*:*:*:*:* Versions before 8.88_cdi3a4a Vulnerable ·Lenovo
cpe:2.3:h:lenovo:thinkagile_vx7520_n:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Lenovo
cpe:2.3:o:lenovo:thinkagile_vx7530_firmware:*:*:*:*:*:*:*:* Versions before 2.93_afbt30p Vulnerable ·Lenovo
cpe:2.3:h:lenovo:thinkagile_vx7530:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Lenovo
cpe:2.3:o:lenovo:thinkagile_vx7531_firmware:*:*:*:*:*:*:*:* Versions before 2.93_afbt30p Vulnerable ·Lenovo
cpe:2.3:h:lenovo:thinkagile_vx7531:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Lenovo
cpe:2.3:o:lenovo:thinkagile_vx7820_firmware:*:*:*:*:*:*:*:* Versions before 2.75_psi348s Vulnerable ·Lenovo
cpe:2.3:h:lenovo:thinkagile_vx7820:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Lenovo
cpe:2.3:o:lenovo:thinkedge_se450__firmware:*:*:*:*:*:*:*:* Versions before 1.60_usx324o Vulnerable ·Lenovo
cpe:2.3:h:lenovo:thinkedge_se450_:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Lenovo
cpe:2.3:o:lenovo:thinkstation_p920_firmware:*:*:*:*:*:*:*:* Versions before 8.88_cdi3a4a Vulnerable ·Lenovo
cpe:2.3:h:lenovo:thinkstation_p920:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Lenovo
cpe:2.3:o:lenovo:thinksystem_sd530_firmware:*:*:*:*:*:*:*:* Versions before 3.72_tei388s Vulnerable ·Lenovo
cpe:2.3:h:lenovo:thinksystem_sd530:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Lenovo
cpe:2.3:o:lenovo:thinksystem_sd630_v2_firmware:*:*:*:*:*:*:*:* Versions before 2.60_tgbt42h Vulnerable ·Lenovo
cpe:2.3:h:lenovo:thinksystem_sd630_v2:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Lenovo
cpe:2.3:o:lenovo:thinksystem_sd650_firmware:*:*:*:*:*:*:*:* Versions before 3.72_tei388s Vulnerable ·Lenovo
cpe:2.3:h:lenovo:thinksystem_sd650:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Lenovo
cpe:2.3:o:lenovo:thinksystem_sd650_v2_firmware:*:*:*:*:*:*:*:* Versions before 2.60_tgbt42h Vulnerable ·Lenovo
cpe:2.3:h:lenovo:thinksystem_sd650_v2:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Lenovo
cpe:2.3:o:lenovo:thinksystem_sd650-n_v2_firmware:*:*:*:*:*:*:*:* Versions before 2.60_tgbt42h Vulnerable ·Lenovo
cpe:2.3:h:lenovo:thinksystem_sd650-n_v2:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Lenovo
cpe:2.3:o:lenovo:thinksystem_se350_firmware:*:*:*:*:*:*:*:* Versions before 3.72_tei388s Vulnerable ·Lenovo
cpe:2.3:h:lenovo:thinksystem_se350:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Lenovo
cpe:2.3:o:lenovo:thinksystem_sn550_firmware:*:*:*:*:*:*:*:* Versions before 3.72_tei388s Vulnerable ·Lenovo
cpe:2.3:h:lenovo:thinksystem_sn550:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Lenovo
cpe:2.3:o:lenovo:thinksystem_sn550_v2_firmware:*:*:*:*:*:*:*:* Versions before 2.60_tgbt42h Vulnerable ·Lenovo
cpe:2.3:h:lenovo:thinksystem_sn550_v2:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Lenovo
cpe:2.3:o:lenovo:thinksystem_sn850_firmware:*:*:*:*:*:*:*:* Versions before 3.72_tei388s Vulnerable ·Lenovo
cpe:2.3:h:lenovo:thinksystem_sn850:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Lenovo
cpe:2.3:o:lenovo:thinksystem_sr150_firmware:*:*:*:*:*:*:*:* Versions before 3.72_tei388s Vulnerable ·Lenovo
cpe:2.3:h:lenovo:thinksystem_sr150:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Lenovo
cpe:2.3:o:lenovo:thinksystem_sr158_firmware:*:*:*:*:*:*:*:* Versions before 3.72_tei388s Vulnerable ·Lenovo
cpe:2.3:h:lenovo:thinksystem_sr158:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Lenovo
cpe:2.3:o:lenovo:thinksystem_sr250_firmware:*:*:*:*:*:*:*:* Versions before 3.72_tei388s Vulnerable ·Lenovo
cpe:2.3:h:lenovo:thinksystem_sr250:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Lenovo
cpe:2.3:o:lenovo:thinksystem_sr250_v2_firmware:*:*:*:*:*:*:*:* Versions before 2.60_tgbt42h Vulnerable ·Lenovo
cpe:2.3:h:lenovo:thinksystem_sr250_v2:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Lenovo
cpe:2.3:o:lenovo:thinksystem_sr258_firmware:*:*:*:*:*:*:*:* Versions before 3.72_tei388s Vulnerable ·Lenovo
cpe:2.3:h:lenovo:thinksystem_sr258:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Lenovo
cpe:2.3:o:lenovo:thinksystem_sr258_v2_firmware:*:*:*:*:*:*:*:* Versions before 2.60_tgbt42h Vulnerable ·Lenovo
cpe:2.3:h:lenovo:thinksystem_sr258_v2:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Lenovo
cpe:2.3:o:lenovo:thinksystem_sr530_firmware:*:*:*:*:*:*:*:* Versions before 8.88_cdi3a4a Vulnerable ·Lenovo
cpe:2.3:h:lenovo:thinksystem_sr530:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Lenovo
cpe:2.3:o:lenovo:thinksystem_sr550_firmware:*:*:*:*:*:*:*:* Versions before 8.88_cdi3a4a Vulnerable ·Lenovo
cpe:2.3:h:lenovo:thinksystem_sr550:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Lenovo
cpe:2.3:o:lenovo:thinksystem_sr570_firmware:*:*:*:*:*:*:*:* Versions before 8.88_cdi3a4a Vulnerable ·Lenovo
cpe:2.3:h:lenovo:thinksystem_sr570:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Lenovo
cpe:2.3:o:lenovo:thinksystem_sr590_firmware:*:*:*:*:*:*:*:* Versions before 8.88_cdi3a4a Vulnerable ·Lenovo
cpe:2.3:h:lenovo:thinksystem_sr590:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Lenovo
cpe:2.3:o:lenovo:thinksystem_sr630_firmware:*:*:*:*:*:*:*:* Versions before 8.88_cdi3a4a Vulnerable ·Lenovo
cpe:2.3:h:lenovo:thinksystem_sr630:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Lenovo
cpe:2.3:o:lenovo:thinksystem_sr630_v2_firmware:*:*:*:*:*:*:*:* Versions before 2.93_afbt30p Vulnerable ·Lenovo
cpe:2.3:h:lenovo:thinksystem_sr630_v2:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Lenovo
cpe:2.3:o:lenovo:thinksystem_sr645_firmware:*:*:*:*:*:*:*:* Versions before 4.71_d8bt48p Vulnerable ·Lenovo
cpe:2.3:h:lenovo:thinksystem_sr645:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Lenovo
cpe:2.3:o:lenovo:thinksystem_sr645_v3_firmware:*:*:*:*:*:*:*:* Versions before 4.71_d8bt48p Vulnerable ·Lenovo
cpe:2.3:h:lenovo:thinksystem_sr645_v3:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Lenovo
cpe:2.3:o:lenovo:thinksystem_sr650_firmware:*:*:*:*:*:*:*:* Versions before 8.88_cdi3a4a Vulnerable ·Lenovo
cpe:2.3:h:lenovo:thinksystem_sr650:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Lenovo
cpe:2.3:o:lenovo:thinksystem_sr650_v2_firmware:*:*:*:*:*:*:*:* Versions before 2.93_afbt30p Vulnerable ·Lenovo
cpe:2.3:h:lenovo:thinksystem_sr650_v2:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Lenovo
cpe:2.3:o:lenovo:thinksystem_sr665_firmware:*:*:*:*:*:*:*:* Versions before 4.71_d8bt48p Vulnerable ·Lenovo
cpe:2.3:h:lenovo:thinksystem_sr665:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Lenovo
cpe:2.3:o:lenovo:thinksystem_sr665_v3_firmware:*:*:*:*:*:*:*:* Versions before 4.71_d8bt48p Vulnerable ·Lenovo
cpe:2.3:h:lenovo:thinksystem_sr665_v3:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Lenovo
cpe:2.3:o:lenovo:thinksystem_sr670_firmware:*:*:*:*:*:*:*:* Versions before 3.72_tei388s Vulnerable ·Lenovo
cpe:2.3:h:lenovo:thinksystem_sr670:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Lenovo
cpe:2.3:o:lenovo:thinksystem_sr670_v2_firmware:*:*:*:*:*:*:*:* Versions before 2.60_tgbt42h Vulnerable ·Lenovo
cpe:2.3:h:lenovo:thinksystem_sr670_v2:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Lenovo
cpe:2.3:o:lenovo:thinksystem_sr850_firmware:*:*:*:*:*:*:*:* Versions before 3.72_tei388s Vulnerable ·Lenovo
cpe:2.3:h:lenovo:thinksystem_sr850:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Lenovo
cpe:2.3:o:lenovo:thinksystem_sr850_v2_firmware:*:*:*:*:*:*:*:* Versions before 2.60_tgbt42h Vulnerable ·Lenovo
cpe:2.3:h:lenovo:thinksystem_sr850_v2:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Lenovo
cpe:2.3:o:lenovo:thinksystem_sr850p_firmware:*:*:*:*:*:*:*:* Versions before 3.72_tei388s Vulnerable ·Lenovo
cpe:2.3:h:lenovo:thinksystem_sr850p:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Lenovo
cpe:2.3:o:lenovo:thinksystem_sr860_firmware:*:*:*:*:*:*:*:* Versions before 3.72_tei388s Vulnerable ·Lenovo
cpe:2.3:h:lenovo:thinksystem_sr860:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Lenovo
cpe:2.3:o:lenovo:thinksystem_sr860_v2_firmware:*:*:*:*:*:*:*:* Versions before 2.60_tgbt42h Vulnerable ·Lenovo
cpe:2.3:h:lenovo:thinksystem_sr860_v2:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Lenovo
cpe:2.3:o:lenovo:thinksystem_sr950_firmware:*:*:*:*:*:*:*:* Versions before 2.75_psi348s Vulnerable ·Lenovo
cpe:2.3:h:lenovo:thinksystem_sr950:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Lenovo
cpe:2.3:o:lenovo:thinksystem_st250_firmware:*:*:*:*:*:*:*:* Versions before 3.72_tei388s Vulnerable ·Lenovo
cpe:2.3:h:lenovo:thinksystem_st250:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Lenovo
cpe:2.3:o:lenovo:thinksystem_st250_v2_firmware:*:*:*:*:*:*:*:* Versions before 2.60_tgbt42h Vulnerable ·Lenovo
cpe:2.3:h:lenovo:thinksystem_st250_v2:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Lenovo
cpe:2.3:o:lenovo:thinksystem_st258_firmware:*:*:*:*:*:*:*:* Versions before 3.72_tei388s Vulnerable ·Lenovo
cpe:2.3:h:lenovo:thinksystem_st258:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Lenovo
cpe:2.3:o:lenovo:thinksystem_st258_v2_firmware:*:*:*:*:*:*:*:* Versions before 2.60_tgbt42h Vulnerable ·Lenovo
cpe:2.3:h:lenovo:thinksystem_st258_v2:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Lenovo
cpe:2.3:o:lenovo:thinksystem_st550_firmware:*:*:*:*:*:*:*:* Versions before 8.88_cdi3a4a Vulnerable ·Lenovo
cpe:2.3:h:lenovo:thinksystem_st550:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Lenovo
cpe:2.3:o:lenovo:thinksystem_st650_v2_firmware:*:*:*:*:*:*:*:* Versions before 2.60_tgbt42h Vulnerable ·Lenovo
cpe:2.3:h:lenovo:thinksystem_st650_v2:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Lenovo
cpe:2.3:o:lenovo:thinksystem_st658_v2_firmware:*:*:*:*:*:*:*:* Versions before 2.60_tgbt42h Vulnerable ·Lenovo
cpe:2.3:h:lenovo:thinksystem_st658_v2:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Lenovo

Remediation

No fixed version listed by the sources yet.

Timeline

2026-10-02 Threatist record created from CVE-2023-25495
2026-10-03 Alias added: GHSA-66qf-8j2h-9xmq

References

Advisory 1

https://support.lenovo.com/us/en/product_security/LEN-99936

TI-2023-13507 Incorrect default permissions in Lenovo XClarity Controller CVSS 3.1HIGH 8.8
TI-2023-10802 A valid, authenticated user may be able to trigger a denial of service of the XCC web… CVSS 3.1HIGH 8.8
TI-2023-00645 Improper input validation in Lenovo XClarity Controller CVSS 3.1HIGH 8.8
TI-2024-02474 OS command injection in Lenovo SMM, SMM2, FPC CVSS 3.1HIGH 7.2
TI-2023-13506 Improper privilege management in Lenovo XClarity Controller CVSS 3.1MEDIUM 5.9
TI-2022-15680 Stack-based buffer overflow in Lenovo XClarity Controller CVSS 3.1HIGH 7.2

See all 9 →

Sources

This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences