TI-2023-13507 Aliases CVE-2023-29057 GHSA-9gph-8xxh-c4w6

Incorrect default permissions in Lenovo XClarity Controller

MEDIUM 41CWE-276Published 2023-04-28 · Updated 2025-01-30

Key facts

Attack vector: Network
Privileges required: Low
User interaction: None
Attack complexity: Low
Impact type: —
Confidentiality · integrity · availability: High · High · High
Fix status: No fix listed

Attack profile from CVSS 3.1 · NVD. Fix status from CNA.

Summary

A valid XCC user's local account permissions overrides their active directory permissions under specific configurations. This could lead to a privilege escalation. To be vulnerable, LDAP must be configured for authentication/authorization and logins configured as “Local First, then LDAP”.

Why it matters now

Exploitation None reported CISA SSVC · not in CISA KEV

EPSS 0.005 43rd percentileScored 2026-11-07

Fix No fix listed No fixed version in the sources yet

SSVC decision points

CISA ADP · SSVC 2.0.3

Exploitation: None
Automatable: No
Technical impact: Total

The decision (Track, Attend, Act) also depends on your mission and well-being impact; see CISA's SSVC guide.

Affected products

Vendor	Product	Affected versions	Fixed in	Status	Source
Lenovo	XClarity Controller	Refer to Mitigation strategy section in LEN-118321	—	No fix listed	CNA

XClarity Controller VendorLenovo Affected Refer to Mitigation strategy section in LEN-118321 Fixed in — No fix listed CNA

CPE configurations NVD · 221

CPE	Versions	Role	Vendor
cpe:2.3:o:lenovo:thinkagile_hx5530_firmware::::::::	before 2.93_afbt30p	Vulnerable	Lenovo
cpe:2.3:h:lenovo:thinkagile_hx5530:-:::::::*	not specified by NVD	Running on	Lenovo
cpe:2.3:o:lenovo:thinkagile_hx7530_firmware::::::::	before 2.93_afbt30p	Vulnerable	Lenovo
cpe:2.3:h:lenovo:thinkagile_hx7530:-:::::::*	not specified by NVD	Running on	Lenovo
cpe:2.3:o:lenovo:thinkagile_vx3331_firmware::::::::	before 2.93_afbt30p	Vulnerable	Lenovo
cpe:2.3:h:lenovo:thinkagile_vx3331:-:::::::*	not specified by NVD	Running on	Lenovo
cpe:2.3:o:lenovo:thinkagile_hx_enclosure_firmware::::::::	before 3.72_tei388s	Vulnerable	Lenovo
cpe:2.3:h:lenovo:thinkagile_hx_enclosure:-:::::::*	not specified by NVD	Running on	Lenovo
cpe:2.3:o:lenovo:thinkagile_hx1021_firmware::::::::	before 3.72_tei388s	Vulnerable	Lenovo
cpe:2.3:h:lenovo:thinkagile_hx1021:-:::::::*	not specified by NVD	Running on	Lenovo

cpe:2.3:o:lenovo:thinkagile_hx5530_firmware:*:*:*:*:*:*:*:* Versions before 2.93_afbt30p Vulnerable ·Lenovo
cpe:2.3:h:lenovo:thinkagile_hx5530:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Lenovo
cpe:2.3:o:lenovo:thinkagile_hx7530_firmware:*:*:*:*:*:*:*:* Versions before 2.93_afbt30p Vulnerable ·Lenovo
cpe:2.3:h:lenovo:thinkagile_hx7530:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Lenovo
cpe:2.3:o:lenovo:thinkagile_vx3331_firmware:*:*:*:*:*:*:*:* Versions before 2.93_afbt30p Vulnerable ·Lenovo
cpe:2.3:h:lenovo:thinkagile_vx3331:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Lenovo
cpe:2.3:o:lenovo:thinkagile_hx_enclosure_firmware:*:*:*:*:*:*:*:* Versions before 3.72_tei388s Vulnerable ·Lenovo
cpe:2.3:h:lenovo:thinkagile_hx_enclosure:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Lenovo
cpe:2.3:o:lenovo:thinkagile_hx1021_firmware:*:*:*:*:*:*:*:* Versions before 3.72_tei388s Vulnerable ·Lenovo
cpe:2.3:h:lenovo:thinkagile_hx1021:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Lenovo

Show 211 more CPE

CPE	Versions	Role	Vendor
cpe:2.3:o:lenovo:thinkagile_hx1320_firmware::::::::	before 8.88_cdi3a4a	Vulnerable	Lenovo
cpe:2.3:h:lenovo:thinkagile_hx1320:-:::::::*	not specified by NVD	Running on	Lenovo
cpe:2.3:o:lenovo:thinkagile_hx1321_firmware::::::::	before 8.88_cdi3a4a	Vulnerable	Lenovo
cpe:2.3:h:lenovo:thinkagile_hx1321:-:::::::*	not specified by NVD	Running on	Lenovo
cpe:2.3:o:lenovo:thinkagile_hx1331_firmware::::::::	before 2.93_afbt30p	Vulnerable	Lenovo
cpe:2.3:h:lenovo:thinkagile_hx1331:-:::::::*	not specified by NVD	Running on	Lenovo
cpe:2.3:o:lenovo:thinkagile_hx1520-r_firmware::::::::	before 8.88_cdi3a4a	Vulnerable	Lenovo
cpe:2.3:h:lenovo:thinkagile_hx1520-r:-:::::::*	not specified by NVD	Running on	Lenovo
cpe:2.3:o:lenovo:thinkagile_hx1521-r_firmware::::::::	before 8.88_cdi3a4a	Vulnerable	Lenovo
cpe:2.3:h:lenovo:thinkagile_hx1521-r:-:::::::*	not specified by NVD	Running on	Lenovo
cpe:2.3:o:lenovo:thinkagile_hx2320-e_firmware::::::::	before 8.88_cdi3a4a	Vulnerable	Lenovo
cpe:2.3:h:lenovo:thinkagile_hx2320-e:-:::::::*	not specified by NVD	Running on	Lenovo
cpe:2.3:o:lenovo:thinkagile_hx2321_firmware::::::::	before 8.88_cdi3a4a	Vulnerable	Lenovo
cpe:2.3:h:lenovo:thinkagile_hx2321:-:::::::*	not specified by NVD	Running on	Lenovo
cpe:2.3:o:lenovo:thinkagile_hx2330_firmware::::::::	before 2.93_afbt30p	Vulnerable	Lenovo
cpe:2.3:o:lenovo:thinkagile_hx2330_firmware:2.93_afbt30p:::::::*	2.93_afbt30p	Vulnerable	Lenovo
cpe:2.3:h:lenovo:thinkagile_hx2330:-:::::::*	not specified by NVD	Running on	Lenovo
cpe:2.3:o:lenovo:thinkagile_hx2331_firmware::::::::	before 2.93_afbt30p	Vulnerable	Lenovo
cpe:2.3:h:lenovo:thinkagile_hx2331:-:::::::*	not specified by NVD	Running on	Lenovo
cpe:2.3:o:lenovo:thinkagile_hx2720-e_firmware::::::::	before 3.72_tei388s	Vulnerable	Lenovo
cpe:2.3:h:lenovo:thinkagile_hx2720-e:-:::::::*	not specified by NVD	Running on	Lenovo
cpe:2.3:o:lenovo:thinkagile_hx3320_firmware::::::::	before 8.88_cdi3a4a	Vulnerable	Lenovo
cpe:2.3:h:lenovo:thinkagile_hx3320:-:::::::*	not specified by NVD	Running on	Lenovo
cpe:2.3:o:lenovo:thinkagile_hx3321_firmware::::::::	before 8.88_cdi3a4a	Vulnerable	Lenovo
cpe:2.3:h:lenovo:thinkagile_hx3321:-:::::::*	not specified by NVD	Running on	Lenovo
cpe:2.3:o:lenovo:thinkagile_hx3330_firmware::::::::	before 2.93_afbt30p	Vulnerable	Lenovo
cpe:2.3:h:lenovo:thinkagile_hx3330:-:::::::*	not specified by NVD	Running on	Lenovo
cpe:2.3:o:lenovo:thinkagile_hx3331_firmware::::::::	before 2.93_afbt30p	Vulnerable	Lenovo
cpe:2.3:h:lenovo:thinkagile_hx3331:-:::::::*	not specified by NVD	Running on	Lenovo
cpe:2.3:o:lenovo:thinkagile_hx3331_firmware::::::::	before 4.71_d8bt48p	Vulnerable	Lenovo
cpe:2.3:o:lenovo:thinkagile_hx3375_firmware::::::::	before 4.71_d8bt48p	Vulnerable	Lenovo
cpe:2.3:h:lenovo:thinkagile_hx3375:-:::::::*	not specified by NVD	Running on	Lenovo
cpe:2.3:o:lenovo:thinkagile_hx3376_firmware::::::::	before 8.88_cdi3a4a	Vulnerable	Lenovo
cpe:2.3:h:lenovo:thinkagile_hx3376:-:::::::*	not specified by NVD	Running on	Lenovo
cpe:2.3:o:lenovo:thinkagile_hx3520-g_firmware::::::::	before 8.88_cdi3a4a	Vulnerable	Lenovo
cpe:2.3:h:lenovo:thinkagile_hx3520-g:-:::::::*	not specified by NVD	Running on	Lenovo
cpe:2.3:o:lenovo:thinkagile_hx3521-g_firmware::::::::	before 3.72_tei388s	Vulnerable	Lenovo
cpe:2.3:h:lenovo:thinkagile_hx3521-g:-:::::::*	not specified by NVD	Running on	Lenovo
cpe:2.3:o:lenovo:thinkagile_hx3720_firmware::::::::	before 3.72_tei388s	Vulnerable	Lenovo
cpe:2.3:h:lenovo:thinkagile_hx3720:-:::::::*	not specified by NVD	Running on	Lenovo
cpe:2.3:o:lenovo:thinkagile_hx3721_firmware::::::::	before 8.88_cdi3a4a	Vulnerable	Lenovo
cpe:2.3:h:lenovo:thinkagile_hx3721:-:::::::*	not specified by NVD	Running on	Lenovo
cpe:2.3:o:lenovo:thinkagile_hx5520_firmware::::::::	before 8.88_cdi3a4a	Vulnerable	Lenovo
cpe:2.3:h:lenovo:thinkagile_hx5520:-:::::::*	not specified by NVD	Running on	Lenovo
cpe:2.3:o:lenovo:thinkagile_hx5520-c_firmware::::::::	before 8.88_cdi3a4a	Vulnerable	Lenovo
cpe:2.3:h:lenovo:thinkagile_hx5520-c:-:::::::*	not specified by NVD	Running on	Lenovo
cpe:2.3:o:lenovo:thinkagile_hx5521_firmware::::::::	before 8.88_cdi3a4a	Vulnerable	Lenovo
cpe:2.3:h:lenovo:thinkagile_hx5521:-:::::::*	not specified by NVD	Running on	Lenovo
cpe:2.3:o:lenovo:thinkagile_hx5521-c_firmware::::::::	before 2.93_afbt30p	Vulnerable	Lenovo
cpe:2.3:h:lenovo:thinkagile_hx5521-c:-:::::::*	not specified by NVD	Running on	Lenovo
cpe:2.3:o:lenovo:thinkagile_hx5531_firmware::::::::	before 8.88_cdi3a4a	Vulnerable	Lenovo
cpe:2.3:h:lenovo:thinkagile_hx5531:-:::::::*	not specified by NVD	Running on	Lenovo
cpe:2.3:o:lenovo:thinkagile_hx7520_firmware::::::::	before 8.88_cdi3a4a	Vulnerable	Lenovo
cpe:2.3:h:lenovo:thinkagile_hx7520:-:::::::*	not specified by NVD	Running on	Lenovo
cpe:2.3:o:lenovo:thinkagile_hx7521_firmware::::::::	before 2.93_afbt30p	Vulnerable	Lenovo
cpe:2.3:h:lenovo:thinkagile_hx7521:-:::::::*	not specified by NVD	Running on	Lenovo
cpe:2.3:o:lenovo:thinkagile_hx7531_firmware::::::::	before 2.93_afbt30p	Vulnerable	Lenovo
cpe:2.3:h:lenovo:thinkagile_hx7531:-:::::::*	not specified by NVD	Running on	Lenovo
cpe:2.3:o:lenovo:thinkagile_hx7531_firmware::::::::	before 2.75_psi348s	Vulnerable	Lenovo
cpe:2.3:o:lenovo:thinkagile_hx7820_firmware::::::::	before 2.75_psi348s	Vulnerable	Lenovo
cpe:2.3:h:lenovo:thinkagile_hx7820:-:::::::*	not specified by NVD	Running on	Lenovo
cpe:2.3:o:lenovo:thinkagile_hx7821_firmware::::::::	before 3.72_tei388s	Vulnerable	Lenovo
cpe:2.3:h:lenovo:thinkagile_hx7821:-:::::::*	not specified by NVD	Running on	Lenovo
cpe:2.3:o:lenovo:thinkagile_mx1020_firmware::::::::	before 2.93_afbt30p	Vulnerable	Lenovo
cpe:2.3:h:lenovo:thinkagile_mx1020:-:::::::*	not specified by NVD	Running on	Lenovo
cpe:2.3:o:lenovo:thinkagile_mx3330-f_firmware::::::::	before 2.93_afbt30p	Vulnerable	Lenovo
cpe:2.3:h:lenovo:thinkagile_mx3330-f:-:::::::*	not specified by NVD	Running on	Lenovo
cpe:2.3:o:lenovo:thinkagile_mx3330-h_firmware::::::::	before 2.93_afbt30p	Vulnerable	Lenovo
cpe:2.3:h:lenovo:thinkagile_mx3330-h:-:::::::*	not specified by NVD	Running on	Lenovo
cpe:2.3:o:lenovo:thinkagile_mx3331-f_firmware::::::::	before 2.93_afbt30p	Vulnerable	Lenovo
cpe:2.3:h:lenovo:thinkagile_mx3331-f:-:::::::*	not specified by NVD	Running on	Lenovo
cpe:2.3:o:lenovo:thinkagile_mx3331-h_firmware::::::::	before 2.93_afbt30p	Vulnerable	Lenovo
cpe:2.3:h:lenovo:thinkagile_mx3331-h:-:::::::*	not specified by NVD	Running on	Lenovo
cpe:2.3:o:lenovo:thinkagile_mx3530_f_firmware::::::::	before 2.93_afbt30p	Vulnerable	Lenovo
cpe:2.3:h:lenovo:thinkagile_mx3530_f:-:::::::*	not specified by NVD	Running on	Lenovo
cpe:2.3:o:lenovo:thinkagile_mx3530-h_firmware::::::::	before 2.93_afbt30p	Vulnerable	Lenovo
cpe:2.3:h:lenovo:thinkagile_mx3530-h:-:::::::*	not specified by NVD	Running on	Lenovo
cpe:2.3:o:lenovo:thinkagile_mx3531_h_firmware::::::::	before 2.93_afbt30p	Vulnerable	Lenovo
cpe:2.3:h:lenovo:thinkagile_mx3531_h:-:::::::*	not specified by NVD	Running on	Lenovo
cpe:2.3:o:lenovo:thinkagile_mx3531-f_firmware::::::::	before 3.72_tei388s	Vulnerable	Lenovo
cpe:2.3:h:lenovo:thinkagile_mx3531-f:-:::::::*	not specified by NVD	Running on	Lenovo
cpe:2.3:o:lenovo:thinkagile_mx1021_on_se350_firmware::::::::	before 3.72_tei388s	Vulnerable	Lenovo
cpe:2.3:h:lenovo:thinkagile_mx1021_on_se350:-:::::::*	not specified by NVD	Running on	Lenovo
cpe:2.3:o:lenovo:thinkagile_vx_1se_firmware::::::::	before 3.72_tei388s	Vulnerable	Lenovo
cpe:2.3:h:lenovo:thinkagile_vx_1se:-:::::::*	not specified by NVD	Running on	Lenovo
cpe:2.3:o:lenovo:thinkagile_vx_2u4n_firmware::::::::	before 3.72_tei388s	Vulnerable	Lenovo
cpe:2.3:h:lenovo:thinkagile_vx_2u4n:-:::::::*	not specified by NVD	Running on	Lenovo
cpe:2.3:o:lenovo:thinkagile_vx_4u_firmware::::::::	before 2.75_psi348s	Vulnerable	Lenovo
cpe:2.3:h:lenovo:thinkagile_vx_4u:-:::::::*	not specified by NVD	Running on	Lenovo
cpe:2.3:o:lenovo:thinkagile_vx1320_firmware::::::::	before 3.72_tei388s	Vulnerable	Lenovo
cpe:2.3:h:lenovo:thinkagile_vx1320:-:::::::*	not specified by NVD	Running on	Lenovo
cpe:2.3:o:lenovo:thinkagile_vx2320_firmware::::::::	before 8.88_cdi3a4a	Vulnerable	Lenovo
cpe:2.3:h:lenovo:thinkagile_vx2320:-:::::::*	not specified by NVD	Running on	Lenovo
cpe:2.3:o:lenovo:thinkagile_vx2330_firmware::::::::	before 2.93_afbt30p	Vulnerable	Lenovo
cpe:2.3:h:lenovo:thinkagile_vx2330:-:::::::*	not specified by NVD	Running on	Lenovo
cpe:2.3:o:lenovo:thinkagile_vx3320_firmware::::::::	before 8.88_cdi3a4a	Vulnerable	Lenovo
cpe:2.3:h:lenovo:thinkagile_vx3320:-:::::::*	not specified by NVD	Running on	Lenovo
cpe:2.3:o:lenovo:thinkagile_vx3330_firmware::::::::	before 2.93_afbt30p	Vulnerable	Lenovo
cpe:2.3:h:lenovo:thinkagile_vx3330:-:::::::*	not specified by NVD	Running on	Lenovo
cpe:2.3:o:lenovo:thinkagile_vx3520-g_firmware::::::::	before 8.88_cdi3a4a	Vulnerable	Lenovo
cpe:2.3:h:lenovo:thinkagile_vx3520-g:-:::::::*	not specified by NVD	Running on	Lenovo
cpe:2.3:o:lenovo:thinkagile_vx3530-g_firmware::::::::	before 2.93_afbt30p	Vulnerable	Lenovo
cpe:2.3:h:lenovo:thinkagile_vx3530-g:-:::::::*	not specified by NVD	Running on	Lenovo
cpe:2.3:o:lenovo:thinkagile_vx3720_firmware::::::::	before 3.72_tei388s	Vulnerable	Lenovo
cpe:2.3:h:lenovo:thinkagile_vx3720:-:::::::*	not specified by NVD	Running on	Lenovo
cpe:2.3:o:lenovo:thinkagile_vx5520_firmware::::::::	before 8.88_cdi3a4a	Vulnerable	Lenovo
cpe:2.3:h:lenovo:thinkagile_vx5520:-:::::::*	not specified by NVD	Running on	Lenovo
cpe:2.3:o:lenovo:thinkagile_vx5530_firmware::::::::	before 2.93_afbt30p	Vulnerable	Lenovo
cpe:2.3:h:lenovo:thinkagile_vx5530:-:::::::*	not specified by NVD	Running on	Lenovo
cpe:2.3:o:lenovo:thinkagile_vx7320_n_firmware::::::::	before 8.88_cdi3a4a	Vulnerable	Lenovo
cpe:2.3:h:lenovo:thinkagile_vx7320_n:-:::::::*	not specified by NVD	Running on	Lenovo
cpe:2.3:o:lenovo:thinkagile_vx7330_firmware::::::::	before 2.93_afbt30p	Vulnerable	Lenovo
cpe:2.3:h:lenovo:thinkagile_vx7330:-:::::::*	not specified by NVD	Running on	Lenovo
cpe:2.3:o:lenovo:thinkagile_vx7520_firmware::::::::	before 8.88_cdi3a4a	Vulnerable	Lenovo
cpe:2.3:h:lenovo:thinkagile_vx7520:-:::::::*	not specified by NVD	Running on	Lenovo
cpe:2.3:o:lenovo:thinkagile_vx7520_n_firmware::::::::	before 8.88_cdi3a4a	Vulnerable	Lenovo
cpe:2.3:h:lenovo:thinkagile_vx7520_n:-:::::::*	not specified by NVD	Running on	Lenovo
cpe:2.3:o:lenovo:thinkagile_vx7530_firmware::::::::	before 2.93_afbt30p	Vulnerable	Lenovo
cpe:2.3:h:lenovo:thinkagile_vx7530:-:::::::*	not specified by NVD	Running on	Lenovo
cpe:2.3:o:lenovo:thinkagile_vx7531_firmware::::::::	before 2.93_afbt30p	Vulnerable	Lenovo
cpe:2.3:h:lenovo:thinkagile_vx7531:-:::::::*	not specified by NVD	Running on	Lenovo
cpe:2.3:o:lenovo:thinkagile_vx7820_firmware::::::::	before 2.75_psi348s	Vulnerable	Lenovo
cpe:2.3:h:lenovo:thinkagile_vx7820:-:::::::*	not specified by NVD	Running on	Lenovo
cpe:2.3:o:lenovo:thinkedge_se450__firmware::::::::	before 1.60_usx324o	Vulnerable	Lenovo
cpe:2.3:h:lenovo:thinkedge_se450_:-:::::::*	not specified by NVD	Running on	Lenovo
cpe:2.3:o:lenovo:thinkstation_p920_firmware::::::::	before 8.88_cdi3a4a	Vulnerable	Lenovo
cpe:2.3:h:lenovo:thinkstation_p920:-:::::::*	not specified by NVD	Running on	Lenovo
cpe:2.3:o:lenovo:thinksystem_sd530_firmware::::::::	before 3.72_tei388s	Vulnerable	Lenovo
cpe:2.3:h:lenovo:thinksystem_sd530:-:::::::*	not specified by NVD	Running on	Lenovo
cpe:2.3:o:lenovo:thinksystem_sd630_v2_firmware::::::::	before 2.60_tgbt42h	Vulnerable	Lenovo
cpe:2.3:h:lenovo:thinksystem_sd630_v2:-:::::::*	not specified by NVD	Running on	Lenovo
cpe:2.3:o:lenovo:thinksystem_sd650_firmware::::::::	before 3.72_tei388s	Vulnerable	Lenovo
cpe:2.3:h:lenovo:thinksystem_sd650:-:::::::*	not specified by NVD	Running on	Lenovo
cpe:2.3:o:lenovo:thinksystem_sd650_v2_firmware::::::::	before 2.60_tgbt42h	Vulnerable	Lenovo
cpe:2.3:h:lenovo:thinksystem_sd650_v2:-:::::::*	not specified by NVD	Running on	Lenovo
cpe:2.3:o:lenovo:thinksystem_sd650-n_v2_firmware::::::::	before 2.60_tgbt42h	Vulnerable	Lenovo
cpe:2.3:h:lenovo:thinksystem_sd650-n_v2:-:::::::*	not specified by NVD	Running on	Lenovo
cpe:2.3:o:lenovo:thinksystem_se350_firmware::::::::	before 3.72_tei388s	Vulnerable	Lenovo
cpe:2.3:h:lenovo:thinksystem_se350:-:::::::*	not specified by NVD	Running on	Lenovo
cpe:2.3:o:lenovo:thinksystem_sn550_firmware::::::::	before 3.72_tei388s	Vulnerable	Lenovo
cpe:2.3:h:lenovo:thinksystem_sn550:-:::::::*	not specified by NVD	Running on	Lenovo
cpe:2.3:o:lenovo:thinksystem_sn550_v2_firmware::::::::	before 2.60_tgbt42h	Vulnerable	Lenovo
cpe:2.3:h:lenovo:thinksystem_sn550_v2:-:::::::*	not specified by NVD	Running on	Lenovo
cpe:2.3:o:lenovo:thinksystem_sn850_firmware::::::::	before 3.72_tei388s	Vulnerable	Lenovo
cpe:2.3:h:lenovo:thinksystem_sn850:-:::::::*	not specified by NVD	Running on	Lenovo
cpe:2.3:o:lenovo:thinksystem_sr150_firmware::::::::	before 3.72_tei388s	Vulnerable	Lenovo
cpe:2.3:h:lenovo:thinksystem_sr150:-:::::::*	not specified by NVD	Running on	Lenovo
cpe:2.3:o:lenovo:thinksystem_sr158_firmware::::::::	before 3.72_tei388s	Vulnerable	Lenovo
cpe:2.3:h:lenovo:thinksystem_sr158:-:::::::*	not specified by NVD	Running on	Lenovo
cpe:2.3:o:lenovo:thinksystem_sr250_firmware::::::::	before 3.72_tei388s	Vulnerable	Lenovo
cpe:2.3:h:lenovo:thinksystem_sr250:-:::::::*	not specified by NVD	Running on	Lenovo
cpe:2.3:o:lenovo:thinksystem_sr250_v2_firmware::::::::	before 2.60_tgbt42h	Vulnerable	Lenovo
cpe:2.3:h:lenovo:thinksystem_sr250_v2:-:::::::*	not specified by NVD	Running on	Lenovo
cpe:2.3:o:lenovo:thinksystem_sr258_firmware::::::::	before 3.72_tei388s	Vulnerable	Lenovo
cpe:2.3:h:lenovo:thinksystem_sr258:-:::::::*	not specified by NVD	Running on	Lenovo
cpe:2.3:o:lenovo:thinksystem_sr258_v2_firmware::::::::	before 2.60_tgbt42h	Vulnerable	Lenovo
cpe:2.3:h:lenovo:thinksystem_sr258_v2:-:::::::*	not specified by NVD	Running on	Lenovo
cpe:2.3:o:lenovo:thinksystem_sr530_firmware::::::::	before 8.88_cdi3a4a	Vulnerable	Lenovo
cpe:2.3:h:lenovo:thinksystem_sr530:-:::::::*	not specified by NVD	Running on	Lenovo
cpe:2.3:o:lenovo:thinksystem_sr550_firmware::::::::	before 8.88_cdi3a4a	Vulnerable	Lenovo
cpe:2.3:h:lenovo:thinksystem_sr550:-:::::::*	not specified by NVD	Running on	Lenovo
cpe:2.3:o:lenovo:thinksystem_sr570_firmware::::::::	before 8.88_cdi3a4a	Vulnerable	Lenovo
cpe:2.3:h:lenovo:thinksystem_sr570:-:::::::*	not specified by NVD	Running on	Lenovo
cpe:2.3:o:lenovo:thinksystem_sr590_firmware::::::::	before 8.88_cdi3a4a	Vulnerable	Lenovo
cpe:2.3:h:lenovo:thinksystem_sr590:-:::::::*	not specified by NVD	Running on	Lenovo
cpe:2.3:o:lenovo:thinksystem_sr630_firmware::::::::	before 8.88_cdi3a4a	Vulnerable	Lenovo
cpe:2.3:h:lenovo:thinksystem_sr630:-:::::::*	not specified by NVD	Running on	Lenovo
cpe:2.3:o:lenovo:thinksystem_sr630_v2_firmware::::::::	before 2.93_afbt30p	Vulnerable	Lenovo
cpe:2.3:h:lenovo:thinksystem_sr630_v2:-:::::::*	not specified by NVD	Running on	Lenovo
cpe:2.3:o:lenovo:thinksystem_sr645_firmware::::::::	before 4.71_d8bt48p	Vulnerable	Lenovo
cpe:2.3:h:lenovo:thinksystem_sr645:-:::::::*	not specified by NVD	Running on	Lenovo
cpe:2.3:o:lenovo:thinksystem_sr645_v3_firmware::::::::	before 4.71_d8bt48p	Vulnerable	Lenovo
cpe:2.3:h:lenovo:thinksystem_sr645_v3:-:::::::*	not specified by NVD	Running on	Lenovo
cpe:2.3:o:lenovo:thinksystem_sr650_firmware::::::::	before 8.88_cdi3a4a	Vulnerable	Lenovo
cpe:2.3:h:lenovo:thinksystem_sr650:-:::::::*	not specified by NVD	Running on	Lenovo
cpe:2.3:o:lenovo:thinksystem_sr650_v2_firmware::::::::	before 2.93_afbt30p	Vulnerable	Lenovo
cpe:2.3:h:lenovo:thinksystem_sr650_v2:-:::::::*	not specified by NVD	Running on	Lenovo
cpe:2.3:o:lenovo:thinksystem_sr665_firmware::::::::	before 4.71_d8bt48p	Vulnerable	Lenovo
cpe:2.3:h:lenovo:thinksystem_sr665:-:::::::*	not specified by NVD	Running on	Lenovo
cpe:2.3:o:lenovo:thinksystem_sr665_v3_firmware::::::::	before 4.71_d8bt48p	Vulnerable	Lenovo
cpe:2.3:h:lenovo:thinksystem_sr665_v3:-:::::::*	not specified by NVD	Running on	Lenovo
cpe:2.3:o:lenovo:thinksystem_sr670_firmware::::::::	before 3.72_tei388s	Vulnerable	Lenovo
cpe:2.3:h:lenovo:thinksystem_sr670:-:::::::*	not specified by NVD	Running on	Lenovo
cpe:2.3:o:lenovo:thinksystem_sr670_v2_firmware::::::::	before 2.60_tgbt42h	Vulnerable	Lenovo
cpe:2.3:h:lenovo:thinksystem_sr670_v2:-:::::::*	not specified by NVD	Running on	Lenovo
cpe:2.3:o:lenovo:thinksystem_sr850_firmware::::::::	before 3.72_tei388s	Vulnerable	Lenovo
cpe:2.3:h:lenovo:thinksystem_sr850:-:::::::*	not specified by NVD	Running on	Lenovo
cpe:2.3:o:lenovo:thinksystem_sr850_v2_firmware::::::::	before 2.60_tgbt42h	Vulnerable	Lenovo
cpe:2.3:h:lenovo:thinksystem_sr850_v2:-:::::::*	not specified by NVD	Running on	Lenovo
cpe:2.3:o:lenovo:thinksystem_sr850p_firmware::::::::	before 3.72_tei388s	Vulnerable	Lenovo
cpe:2.3:h:lenovo:thinksystem_sr850p:-:::::::*	not specified by NVD	Running on	Lenovo
cpe:2.3:o:lenovo:thinksystem_sr860_firmware::::::::	before 3.72_tei388s	Vulnerable	Lenovo
cpe:2.3:h:lenovo:thinksystem_sr860:-:::::::*	not specified by NVD	Running on	Lenovo
cpe:2.3:o:lenovo:thinksystem_sr860_v2_firmware::::::::	before 2.60_tgbt42h	Vulnerable	Lenovo
cpe:2.3:h:lenovo:thinksystem_sr860_v2:-:::::::*	not specified by NVD	Running on	Lenovo
cpe:2.3:o:lenovo:thinksystem_sr950_firmware::::::::	before 2.75_psi348s	Vulnerable	Lenovo
cpe:2.3:h:lenovo:thinksystem_sr950:-:::::::*	not specified by NVD	Running on	Lenovo
cpe:2.3:o:lenovo:thinksystem_st250_firmware::::::::	before 3.72_tei388s	Vulnerable	Lenovo
cpe:2.3:h:lenovo:thinksystem_st250:-:::::::*	not specified by NVD	Running on	Lenovo
cpe:2.3:o:lenovo:thinksystem_st250_v2_firmware::::::::	before 2.60_tgbt42h	Vulnerable	Lenovo
cpe:2.3:h:lenovo:thinksystem_st250_v2:-:::::::*	not specified by NVD	Running on	Lenovo
cpe:2.3:o:lenovo:thinksystem_st258_firmware::::::::	before 3.72_tei388s	Vulnerable	Lenovo
cpe:2.3:h:lenovo:thinksystem_st258:-:::::::*	not specified by NVD	Running on	Lenovo
cpe:2.3:o:lenovo:thinksystem_st258_v2_firmware::::::::	before 2.60_tgbt42h	Vulnerable	Lenovo
cpe:2.3:h:lenovo:thinksystem_st258_v2:-:::::::*	not specified by NVD	Running on	Lenovo
cpe:2.3:o:lenovo:thinksystem_st550_firmware::::::::	before 8.88_cdi3a4a	Vulnerable	Lenovo
cpe:2.3:h:lenovo:thinksystem_st550:-:::::::*	not specified by NVD	Running on	Lenovo
cpe:2.3:o:lenovo:thinksystem_st650_v2_firmware::::::::	before 2.60_tgbt42h	Vulnerable	Lenovo
cpe:2.3:h:lenovo:thinksystem_st650_v2:-:::::::*	not specified by NVD	Running on	Lenovo
cpe:2.3:o:lenovo:thinksystem_st658_v2_firmware::::::::	before 2.60_tgbt42h	Vulnerable	Lenovo
cpe:2.3:h:lenovo:thinksystem_st658_v2:-:::::::*	not specified by NVD	Running on	Lenovo

cpe:2.3:o:lenovo:thinkagile_hx1320_firmware:*:*:*:*:*:*:*:* Versions before 8.88_cdi3a4a Vulnerable ·Lenovo
cpe:2.3:h:lenovo:thinkagile_hx1320:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Lenovo
cpe:2.3:o:lenovo:thinkagile_hx1321_firmware:*:*:*:*:*:*:*:* Versions before 8.88_cdi3a4a Vulnerable ·Lenovo
cpe:2.3:h:lenovo:thinkagile_hx1321:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Lenovo
cpe:2.3:o:lenovo:thinkagile_hx1331_firmware:*:*:*:*:*:*:*:* Versions before 2.93_afbt30p Vulnerable ·Lenovo
cpe:2.3:h:lenovo:thinkagile_hx1331:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Lenovo
cpe:2.3:o:lenovo:thinkagile_hx1520-r_firmware:*:*:*:*:*:*:*:* Versions before 8.88_cdi3a4a Vulnerable ·Lenovo
cpe:2.3:h:lenovo:thinkagile_hx1520-r:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Lenovo
cpe:2.3:o:lenovo:thinkagile_hx1521-r_firmware:*:*:*:*:*:*:*:* Versions before 8.88_cdi3a4a Vulnerable ·Lenovo
cpe:2.3:h:lenovo:thinkagile_hx1521-r:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Lenovo
cpe:2.3:o:lenovo:thinkagile_hx2320-e_firmware:*:*:*:*:*:*:*:* Versions before 8.88_cdi3a4a Vulnerable ·Lenovo
cpe:2.3:h:lenovo:thinkagile_hx2320-e:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Lenovo
cpe:2.3:o:lenovo:thinkagile_hx2321_firmware:*:*:*:*:*:*:*:* Versions before 8.88_cdi3a4a Vulnerable ·Lenovo
cpe:2.3:h:lenovo:thinkagile_hx2321:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Lenovo
cpe:2.3:o:lenovo:thinkagile_hx2330_firmware:*:*:*:*:*:*:*:* Versions before 2.93_afbt30p Vulnerable ·Lenovo
cpe:2.3:o:lenovo:thinkagile_hx2330_firmware:2.93_afbt30p:*:*:*:*:*:*:* Versions 2.93_afbt30p Vulnerable ·Lenovo
cpe:2.3:h:lenovo:thinkagile_hx2330:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Lenovo
cpe:2.3:o:lenovo:thinkagile_hx2331_firmware:*:*:*:*:*:*:*:* Versions before 2.93_afbt30p Vulnerable ·Lenovo
cpe:2.3:h:lenovo:thinkagile_hx2331:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Lenovo
cpe:2.3:o:lenovo:thinkagile_hx2720-e_firmware:*:*:*:*:*:*:*:* Versions before 3.72_tei388s Vulnerable ·Lenovo
cpe:2.3:h:lenovo:thinkagile_hx2720-e:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Lenovo
cpe:2.3:o:lenovo:thinkagile_hx3320_firmware:*:*:*:*:*:*:*:* Versions before 8.88_cdi3a4a Vulnerable ·Lenovo
cpe:2.3:h:lenovo:thinkagile_hx3320:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Lenovo
cpe:2.3:o:lenovo:thinkagile_hx3321_firmware:*:*:*:*:*:*:*:* Versions before 8.88_cdi3a4a Vulnerable ·Lenovo
cpe:2.3:h:lenovo:thinkagile_hx3321:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Lenovo
cpe:2.3:o:lenovo:thinkagile_hx3330_firmware:*:*:*:*:*:*:*:* Versions before 2.93_afbt30p Vulnerable ·Lenovo
cpe:2.3:h:lenovo:thinkagile_hx3330:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Lenovo
cpe:2.3:o:lenovo:thinkagile_hx3331_firmware:*:*:*:*:*:*:*:* Versions before 2.93_afbt30p Vulnerable ·Lenovo
cpe:2.3:h:lenovo:thinkagile_hx3331:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Lenovo
cpe:2.3:o:lenovo:thinkagile_hx3331_firmware:*:*:*:*:*:*:*:* Versions before 4.71_d8bt48p Vulnerable ·Lenovo
cpe:2.3:o:lenovo:thinkagile_hx3375_firmware:*:*:*:*:*:*:*:* Versions before 4.71_d8bt48p Vulnerable ·Lenovo
cpe:2.3:h:lenovo:thinkagile_hx3375:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Lenovo
cpe:2.3:o:lenovo:thinkagile_hx3376_firmware:*:*:*:*:*:*:*:* Versions before 8.88_cdi3a4a Vulnerable ·Lenovo
cpe:2.3:h:lenovo:thinkagile_hx3376:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Lenovo
cpe:2.3:o:lenovo:thinkagile_hx3520-g_firmware:*:*:*:*:*:*:*:* Versions before 8.88_cdi3a4a Vulnerable ·Lenovo
cpe:2.3:h:lenovo:thinkagile_hx3520-g:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Lenovo
cpe:2.3:o:lenovo:thinkagile_hx3521-g_firmware:*:*:*:*:*:*:*:* Versions before 3.72_tei388s Vulnerable ·Lenovo
cpe:2.3:h:lenovo:thinkagile_hx3521-g:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Lenovo
cpe:2.3:o:lenovo:thinkagile_hx3720_firmware:*:*:*:*:*:*:*:* Versions before 3.72_tei388s Vulnerable ·Lenovo
cpe:2.3:h:lenovo:thinkagile_hx3720:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Lenovo
cpe:2.3:o:lenovo:thinkagile_hx3721_firmware:*:*:*:*:*:*:*:* Versions before 8.88_cdi3a4a Vulnerable ·Lenovo
cpe:2.3:h:lenovo:thinkagile_hx3721:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Lenovo
cpe:2.3:o:lenovo:thinkagile_hx5520_firmware:*:*:*:*:*:*:*:* Versions before 8.88_cdi3a4a Vulnerable ·Lenovo
cpe:2.3:h:lenovo:thinkagile_hx5520:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Lenovo
cpe:2.3:o:lenovo:thinkagile_hx5520-c_firmware:*:*:*:*:*:*:*:* Versions before 8.88_cdi3a4a Vulnerable ·Lenovo
cpe:2.3:h:lenovo:thinkagile_hx5520-c:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Lenovo
cpe:2.3:o:lenovo:thinkagile_hx5521_firmware:*:*:*:*:*:*:*:* Versions before 8.88_cdi3a4a Vulnerable ·Lenovo
cpe:2.3:h:lenovo:thinkagile_hx5521:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Lenovo
cpe:2.3:o:lenovo:thinkagile_hx5521-c_firmware:*:*:*:*:*:*:*:* Versions before 2.93_afbt30p Vulnerable ·Lenovo
cpe:2.3:h:lenovo:thinkagile_hx5521-c:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Lenovo
cpe:2.3:o:lenovo:thinkagile_hx5531_firmware:*:*:*:*:*:*:*:* Versions before 8.88_cdi3a4a Vulnerable ·Lenovo
cpe:2.3:h:lenovo:thinkagile_hx5531:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Lenovo
cpe:2.3:o:lenovo:thinkagile_hx7520_firmware:*:*:*:*:*:*:*:* Versions before 8.88_cdi3a4a Vulnerable ·Lenovo
cpe:2.3:h:lenovo:thinkagile_hx7520:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Lenovo
cpe:2.3:o:lenovo:thinkagile_hx7521_firmware:*:*:*:*:*:*:*:* Versions before 2.93_afbt30p Vulnerable ·Lenovo
cpe:2.3:h:lenovo:thinkagile_hx7521:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Lenovo
cpe:2.3:o:lenovo:thinkagile_hx7531_firmware:*:*:*:*:*:*:*:* Versions before 2.93_afbt30p Vulnerable ·Lenovo
cpe:2.3:h:lenovo:thinkagile_hx7531:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Lenovo
cpe:2.3:o:lenovo:thinkagile_hx7531_firmware:*:*:*:*:*:*:*:* Versions before 2.75_psi348s Vulnerable ·Lenovo
cpe:2.3:o:lenovo:thinkagile_hx7820_firmware:*:*:*:*:*:*:*:* Versions before 2.75_psi348s Vulnerable ·Lenovo
cpe:2.3:h:lenovo:thinkagile_hx7820:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Lenovo
cpe:2.3:o:lenovo:thinkagile_hx7821_firmware:*:*:*:*:*:*:*:* Versions before 3.72_tei388s Vulnerable ·Lenovo
cpe:2.3:h:lenovo:thinkagile_hx7821:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Lenovo
cpe:2.3:o:lenovo:thinkagile_mx1020_firmware:*:*:*:*:*:*:*:* Versions before 2.93_afbt30p Vulnerable ·Lenovo
cpe:2.3:h:lenovo:thinkagile_mx1020:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Lenovo
cpe:2.3:o:lenovo:thinkagile_mx3330-f_firmware:*:*:*:*:*:*:*:* Versions before 2.93_afbt30p Vulnerable ·Lenovo
cpe:2.3:h:lenovo:thinkagile_mx3330-f:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Lenovo
cpe:2.3:o:lenovo:thinkagile_mx3330-h_firmware:*:*:*:*:*:*:*:* Versions before 2.93_afbt30p Vulnerable ·Lenovo
cpe:2.3:h:lenovo:thinkagile_mx3330-h:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Lenovo
cpe:2.3:o:lenovo:thinkagile_mx3331-f_firmware:*:*:*:*:*:*:*:* Versions before 2.93_afbt30p Vulnerable ·Lenovo
cpe:2.3:h:lenovo:thinkagile_mx3331-f:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Lenovo
cpe:2.3:o:lenovo:thinkagile_mx3331-h_firmware:*:*:*:*:*:*:*:* Versions before 2.93_afbt30p Vulnerable ·Lenovo
cpe:2.3:h:lenovo:thinkagile_mx3331-h:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Lenovo
cpe:2.3:o:lenovo:thinkagile_mx3530_f_firmware:*:*:*:*:*:*:*:* Versions before 2.93_afbt30p Vulnerable ·Lenovo
cpe:2.3:h:lenovo:thinkagile_mx3530_f:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Lenovo
cpe:2.3:o:lenovo:thinkagile_mx3530-h_firmware:*:*:*:*:*:*:*:* Versions before 2.93_afbt30p Vulnerable ·Lenovo
cpe:2.3:h:lenovo:thinkagile_mx3530-h:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Lenovo
cpe:2.3:o:lenovo:thinkagile_mx3531_h_firmware:*:*:*:*:*:*:*:* Versions before 2.93_afbt30p Vulnerable ·Lenovo
cpe:2.3:h:lenovo:thinkagile_mx3531_h:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Lenovo
cpe:2.3:o:lenovo:thinkagile_mx3531-f_firmware:*:*:*:*:*:*:*:* Versions before 3.72_tei388s Vulnerable ·Lenovo
cpe:2.3:h:lenovo:thinkagile_mx3531-f:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Lenovo
cpe:2.3:o:lenovo:thinkagile_mx1021_on_se350_firmware:*:*:*:*:*:*:*:* Versions before 3.72_tei388s Vulnerable ·Lenovo
cpe:2.3:h:lenovo:thinkagile_mx1021_on_se350:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Lenovo
cpe:2.3:o:lenovo:thinkagile_vx_1se_firmware:*:*:*:*:*:*:*:* Versions before 3.72_tei388s Vulnerable ·Lenovo
cpe:2.3:h:lenovo:thinkagile_vx_1se:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Lenovo
cpe:2.3:o:lenovo:thinkagile_vx_2u4n_firmware:*:*:*:*:*:*:*:* Versions before 3.72_tei388s Vulnerable ·Lenovo
cpe:2.3:h:lenovo:thinkagile_vx_2u4n:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Lenovo
cpe:2.3:o:lenovo:thinkagile_vx_4u_firmware:*:*:*:*:*:*:*:* Versions before 2.75_psi348s Vulnerable ·Lenovo
cpe:2.3:h:lenovo:thinkagile_vx_4u:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Lenovo
cpe:2.3:o:lenovo:thinkagile_vx1320_firmware:*:*:*:*:*:*:*:* Versions before 3.72_tei388s Vulnerable ·Lenovo
cpe:2.3:h:lenovo:thinkagile_vx1320:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Lenovo
cpe:2.3:o:lenovo:thinkagile_vx2320_firmware:*:*:*:*:*:*:*:* Versions before 8.88_cdi3a4a Vulnerable ·Lenovo
cpe:2.3:h:lenovo:thinkagile_vx2320:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Lenovo
cpe:2.3:o:lenovo:thinkagile_vx2330_firmware:*:*:*:*:*:*:*:* Versions before 2.93_afbt30p Vulnerable ·Lenovo
cpe:2.3:h:lenovo:thinkagile_vx2330:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Lenovo
cpe:2.3:o:lenovo:thinkagile_vx3320_firmware:*:*:*:*:*:*:*:* Versions before 8.88_cdi3a4a Vulnerable ·Lenovo
cpe:2.3:h:lenovo:thinkagile_vx3320:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Lenovo
cpe:2.3:o:lenovo:thinkagile_vx3330_firmware:*:*:*:*:*:*:*:* Versions before 2.93_afbt30p Vulnerable ·Lenovo
cpe:2.3:h:lenovo:thinkagile_vx3330:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Lenovo
cpe:2.3:o:lenovo:thinkagile_vx3520-g_firmware:*:*:*:*:*:*:*:* Versions before 8.88_cdi3a4a Vulnerable ·Lenovo
cpe:2.3:h:lenovo:thinkagile_vx3520-g:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Lenovo
cpe:2.3:o:lenovo:thinkagile_vx3530-g_firmware:*:*:*:*:*:*:*:* Versions before 2.93_afbt30p Vulnerable ·Lenovo
cpe:2.3:h:lenovo:thinkagile_vx3530-g:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Lenovo
cpe:2.3:o:lenovo:thinkagile_vx3720_firmware:*:*:*:*:*:*:*:* Versions before 3.72_tei388s Vulnerable ·Lenovo
cpe:2.3:h:lenovo:thinkagile_vx3720:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Lenovo
cpe:2.3:o:lenovo:thinkagile_vx5520_firmware:*:*:*:*:*:*:*:* Versions before 8.88_cdi3a4a Vulnerable ·Lenovo
cpe:2.3:h:lenovo:thinkagile_vx5520:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Lenovo
cpe:2.3:o:lenovo:thinkagile_vx5530_firmware:*:*:*:*:*:*:*:* Versions before 2.93_afbt30p Vulnerable ·Lenovo
cpe:2.3:h:lenovo:thinkagile_vx5530:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Lenovo
cpe:2.3:o:lenovo:thinkagile_vx7320_n_firmware:*:*:*:*:*:*:*:* Versions before 8.88_cdi3a4a Vulnerable ·Lenovo
cpe:2.3:h:lenovo:thinkagile_vx7320_n:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Lenovo
cpe:2.3:o:lenovo:thinkagile_vx7330_firmware:*:*:*:*:*:*:*:* Versions before 2.93_afbt30p Vulnerable ·Lenovo
cpe:2.3:h:lenovo:thinkagile_vx7330:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Lenovo
cpe:2.3:o:lenovo:thinkagile_vx7520_firmware:*:*:*:*:*:*:*:* Versions before 8.88_cdi3a4a Vulnerable ·Lenovo
cpe:2.3:h:lenovo:thinkagile_vx7520:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Lenovo
cpe:2.3:o:lenovo:thinkagile_vx7520_n_firmware:*:*:*:*:*:*:*:* Versions before 8.88_cdi3a4a Vulnerable ·Lenovo
cpe:2.3:h:lenovo:thinkagile_vx7520_n:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Lenovo
cpe:2.3:o:lenovo:thinkagile_vx7530_firmware:*:*:*:*:*:*:*:* Versions before 2.93_afbt30p Vulnerable ·Lenovo
cpe:2.3:h:lenovo:thinkagile_vx7530:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Lenovo
cpe:2.3:o:lenovo:thinkagile_vx7531_firmware:*:*:*:*:*:*:*:* Versions before 2.93_afbt30p Vulnerable ·Lenovo
cpe:2.3:h:lenovo:thinkagile_vx7531:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Lenovo
cpe:2.3:o:lenovo:thinkagile_vx7820_firmware:*:*:*:*:*:*:*:* Versions before 2.75_psi348s Vulnerable ·Lenovo
cpe:2.3:h:lenovo:thinkagile_vx7820:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Lenovo
cpe:2.3:o:lenovo:thinkedge_se450__firmware:*:*:*:*:*:*:*:* Versions before 1.60_usx324o Vulnerable ·Lenovo
cpe:2.3:h:lenovo:thinkedge_se450_:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Lenovo
cpe:2.3:o:lenovo:thinkstation_p920_firmware:*:*:*:*:*:*:*:* Versions before 8.88_cdi3a4a Vulnerable ·Lenovo
cpe:2.3:h:lenovo:thinkstation_p920:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Lenovo
cpe:2.3:o:lenovo:thinksystem_sd530_firmware:*:*:*:*:*:*:*:* Versions before 3.72_tei388s Vulnerable ·Lenovo
cpe:2.3:h:lenovo:thinksystem_sd530:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Lenovo
cpe:2.3:o:lenovo:thinksystem_sd630_v2_firmware:*:*:*:*:*:*:*:* Versions before 2.60_tgbt42h Vulnerable ·Lenovo
cpe:2.3:h:lenovo:thinksystem_sd630_v2:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Lenovo
cpe:2.3:o:lenovo:thinksystem_sd650_firmware:*:*:*:*:*:*:*:* Versions before 3.72_tei388s Vulnerable ·Lenovo
cpe:2.3:h:lenovo:thinksystem_sd650:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Lenovo
cpe:2.3:o:lenovo:thinksystem_sd650_v2_firmware:*:*:*:*:*:*:*:* Versions before 2.60_tgbt42h Vulnerable ·Lenovo
cpe:2.3:h:lenovo:thinksystem_sd650_v2:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Lenovo
cpe:2.3:o:lenovo:thinksystem_sd650-n_v2_firmware:*:*:*:*:*:*:*:* Versions before 2.60_tgbt42h Vulnerable ·Lenovo
cpe:2.3:h:lenovo:thinksystem_sd650-n_v2:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Lenovo
cpe:2.3:o:lenovo:thinksystem_se350_firmware:*:*:*:*:*:*:*:* Versions before 3.72_tei388s Vulnerable ·Lenovo
cpe:2.3:h:lenovo:thinksystem_se350:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Lenovo
cpe:2.3:o:lenovo:thinksystem_sn550_firmware:*:*:*:*:*:*:*:* Versions before 3.72_tei388s Vulnerable ·Lenovo
cpe:2.3:h:lenovo:thinksystem_sn550:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Lenovo
cpe:2.3:o:lenovo:thinksystem_sn550_v2_firmware:*:*:*:*:*:*:*:* Versions before 2.60_tgbt42h Vulnerable ·Lenovo
cpe:2.3:h:lenovo:thinksystem_sn550_v2:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Lenovo
cpe:2.3:o:lenovo:thinksystem_sn850_firmware:*:*:*:*:*:*:*:* Versions before 3.72_tei388s Vulnerable ·Lenovo
cpe:2.3:h:lenovo:thinksystem_sn850:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Lenovo
cpe:2.3:o:lenovo:thinksystem_sr150_firmware:*:*:*:*:*:*:*:* Versions before 3.72_tei388s Vulnerable ·Lenovo
cpe:2.3:h:lenovo:thinksystem_sr150:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Lenovo
cpe:2.3:o:lenovo:thinksystem_sr158_firmware:*:*:*:*:*:*:*:* Versions before 3.72_tei388s Vulnerable ·Lenovo
cpe:2.3:h:lenovo:thinksystem_sr158:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Lenovo
cpe:2.3:o:lenovo:thinksystem_sr250_firmware:*:*:*:*:*:*:*:* Versions before 3.72_tei388s Vulnerable ·Lenovo
cpe:2.3:h:lenovo:thinksystem_sr250:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Lenovo
cpe:2.3:o:lenovo:thinksystem_sr250_v2_firmware:*:*:*:*:*:*:*:* Versions before 2.60_tgbt42h Vulnerable ·Lenovo
cpe:2.3:h:lenovo:thinksystem_sr250_v2:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Lenovo
cpe:2.3:o:lenovo:thinksystem_sr258_firmware:*:*:*:*:*:*:*:* Versions before 3.72_tei388s Vulnerable ·Lenovo
cpe:2.3:h:lenovo:thinksystem_sr258:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Lenovo
cpe:2.3:o:lenovo:thinksystem_sr258_v2_firmware:*:*:*:*:*:*:*:* Versions before 2.60_tgbt42h Vulnerable ·Lenovo
cpe:2.3:h:lenovo:thinksystem_sr258_v2:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Lenovo
cpe:2.3:o:lenovo:thinksystem_sr530_firmware:*:*:*:*:*:*:*:* Versions before 8.88_cdi3a4a Vulnerable ·Lenovo
cpe:2.3:h:lenovo:thinksystem_sr530:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Lenovo
cpe:2.3:o:lenovo:thinksystem_sr550_firmware:*:*:*:*:*:*:*:* Versions before 8.88_cdi3a4a Vulnerable ·Lenovo
cpe:2.3:h:lenovo:thinksystem_sr550:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Lenovo
cpe:2.3:o:lenovo:thinksystem_sr570_firmware:*:*:*:*:*:*:*:* Versions before 8.88_cdi3a4a Vulnerable ·Lenovo
cpe:2.3:h:lenovo:thinksystem_sr570:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Lenovo
cpe:2.3:o:lenovo:thinksystem_sr590_firmware:*:*:*:*:*:*:*:* Versions before 8.88_cdi3a4a Vulnerable ·Lenovo
cpe:2.3:h:lenovo:thinksystem_sr590:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Lenovo
cpe:2.3:o:lenovo:thinksystem_sr630_firmware:*:*:*:*:*:*:*:* Versions before 8.88_cdi3a4a Vulnerable ·Lenovo
cpe:2.3:h:lenovo:thinksystem_sr630:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Lenovo
cpe:2.3:o:lenovo:thinksystem_sr630_v2_firmware:*:*:*:*:*:*:*:* Versions before 2.93_afbt30p Vulnerable ·Lenovo
cpe:2.3:h:lenovo:thinksystem_sr630_v2:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Lenovo
cpe:2.3:o:lenovo:thinksystem_sr645_firmware:*:*:*:*:*:*:*:* Versions before 4.71_d8bt48p Vulnerable ·Lenovo
cpe:2.3:h:lenovo:thinksystem_sr645:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Lenovo
cpe:2.3:o:lenovo:thinksystem_sr645_v3_firmware:*:*:*:*:*:*:*:* Versions before 4.71_d8bt48p Vulnerable ·Lenovo
cpe:2.3:h:lenovo:thinksystem_sr645_v3:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Lenovo
cpe:2.3:o:lenovo:thinksystem_sr650_firmware:*:*:*:*:*:*:*:* Versions before 8.88_cdi3a4a Vulnerable ·Lenovo
cpe:2.3:h:lenovo:thinksystem_sr650:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Lenovo
cpe:2.3:o:lenovo:thinksystem_sr650_v2_firmware:*:*:*:*:*:*:*:* Versions before 2.93_afbt30p Vulnerable ·Lenovo
cpe:2.3:h:lenovo:thinksystem_sr650_v2:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Lenovo
cpe:2.3:o:lenovo:thinksystem_sr665_firmware:*:*:*:*:*:*:*:* Versions before 4.71_d8bt48p Vulnerable ·Lenovo
cpe:2.3:h:lenovo:thinksystem_sr665:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Lenovo
cpe:2.3:o:lenovo:thinksystem_sr665_v3_firmware:*:*:*:*:*:*:*:* Versions before 4.71_d8bt48p Vulnerable ·Lenovo
cpe:2.3:h:lenovo:thinksystem_sr665_v3:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Lenovo
cpe:2.3:o:lenovo:thinksystem_sr670_firmware:*:*:*:*:*:*:*:* Versions before 3.72_tei388s Vulnerable ·Lenovo
cpe:2.3:h:lenovo:thinksystem_sr670:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Lenovo
cpe:2.3:o:lenovo:thinksystem_sr670_v2_firmware:*:*:*:*:*:*:*:* Versions before 2.60_tgbt42h Vulnerable ·Lenovo
cpe:2.3:h:lenovo:thinksystem_sr670_v2:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Lenovo
cpe:2.3:o:lenovo:thinksystem_sr850_firmware:*:*:*:*:*:*:*:* Versions before 3.72_tei388s Vulnerable ·Lenovo
cpe:2.3:h:lenovo:thinksystem_sr850:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Lenovo
cpe:2.3:o:lenovo:thinksystem_sr850_v2_firmware:*:*:*:*:*:*:*:* Versions before 2.60_tgbt42h Vulnerable ·Lenovo
cpe:2.3:h:lenovo:thinksystem_sr850_v2:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Lenovo
cpe:2.3:o:lenovo:thinksystem_sr850p_firmware:*:*:*:*:*:*:*:* Versions before 3.72_tei388s Vulnerable ·Lenovo
cpe:2.3:h:lenovo:thinksystem_sr850p:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Lenovo
cpe:2.3:o:lenovo:thinksystem_sr860_firmware:*:*:*:*:*:*:*:* Versions before 3.72_tei388s Vulnerable ·Lenovo
cpe:2.3:h:lenovo:thinksystem_sr860:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Lenovo
cpe:2.3:o:lenovo:thinksystem_sr860_v2_firmware:*:*:*:*:*:*:*:* Versions before 2.60_tgbt42h Vulnerable ·Lenovo
cpe:2.3:h:lenovo:thinksystem_sr860_v2:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Lenovo
cpe:2.3:o:lenovo:thinksystem_sr950_firmware:*:*:*:*:*:*:*:* Versions before 2.75_psi348s Vulnerable ·Lenovo
cpe:2.3:h:lenovo:thinksystem_sr950:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Lenovo
cpe:2.3:o:lenovo:thinksystem_st250_firmware:*:*:*:*:*:*:*:* Versions before 3.72_tei388s Vulnerable ·Lenovo
cpe:2.3:h:lenovo:thinksystem_st250:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Lenovo
cpe:2.3:o:lenovo:thinksystem_st250_v2_firmware:*:*:*:*:*:*:*:* Versions before 2.60_tgbt42h Vulnerable ·Lenovo
cpe:2.3:h:lenovo:thinksystem_st250_v2:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Lenovo
cpe:2.3:o:lenovo:thinksystem_st258_firmware:*:*:*:*:*:*:*:* Versions before 3.72_tei388s Vulnerable ·Lenovo
cpe:2.3:h:lenovo:thinksystem_st258:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Lenovo
cpe:2.3:o:lenovo:thinksystem_st258_v2_firmware:*:*:*:*:*:*:*:* Versions before 2.60_tgbt42h Vulnerable ·Lenovo
cpe:2.3:h:lenovo:thinksystem_st258_v2:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Lenovo
cpe:2.3:o:lenovo:thinksystem_st550_firmware:*:*:*:*:*:*:*:* Versions before 8.88_cdi3a4a Vulnerable ·Lenovo
cpe:2.3:h:lenovo:thinksystem_st550:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Lenovo
cpe:2.3:o:lenovo:thinksystem_st650_v2_firmware:*:*:*:*:*:*:*:* Versions before 2.60_tgbt42h Vulnerable ·Lenovo
cpe:2.3:h:lenovo:thinksystem_st650_v2:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Lenovo
cpe:2.3:o:lenovo:thinksystem_st658_v2_firmware:*:*:*:*:*:*:*:* Versions before 2.60_tgbt42h Vulnerable ·Lenovo
cpe:2.3:h:lenovo:thinksystem_st658_v2:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Lenovo

Remediation

No fixed version listed by the sources yet.

Timeline

2026-10-02 Threatist record created from CVE-2023-29057
2026-10-03 Alias added: GHSA-9gph-8xxh-c4w6

References

Advisory 1

https://support.lenovo.com/us/en/product_security/LEN-118321

TI-2023-10802 A valid, authenticated user may be able to trigger a denial of service of the XCC web… CVSS 3.1HIGH 8.8
TI-2023-00645 Improper input validation in Lenovo XClarity Controller CVSS 3.1HIGH 8.8
TI-2024-02474 OS command injection in Lenovo SMM, SMM2, FPC CVSS 3.1HIGH 7.2
TI-2023-13506 Improper privilege management in Lenovo XClarity Controller CVSS 3.1MEDIUM 5.9
TI-2022-15680 Stack-based buffer overflow in Lenovo XClarity Controller CVSS 3.1HIGH 7.2
TI-2023-13508 Incorrect default permissions in Lenovo XClarity Controller CVSS 3.1MEDIUM 6.5

See all 9 →

Sources

This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences