Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

4 records

Release: Lenovo HX Enclosure Certified Node (ThinkAgile) XCC, HX1021 Edge Certified Node 3yr (ThinkAgile) XCC and 138 more products 1.20 USX352, 2.10 CTX312G and 16 more versions Clear all filters
TI-2024-07677 CVE-2024-8281 · GHSA-w25j-fg8w-7xmx

OS command injection in Lenovo HX5530 Appliance XCC

Priority LOW 36

An input validation weakness was discovered in XCC that could allow a valid, authenticated XCC user with elevated privileges to perform command injection through specially crafted command line input in the XCC SSH captiv…

CVSS 3.1HIGH 7.2 Network High privileges No interaction EPSS 0.01032 Published 2024-09-13 Fixed in 4.71 AFBT48C, 2.10 CTX312G +16 CWE-78
TI-2024-07676 CVE-2024-8280 · GHSA-2qxv-pr9r-9797

OS command injection in Lenovo HX5530 Appliance XCC

Priority LOW 36

An input validation weakness was discovered in XCC that could allow a valid, authenticated XCC user with elevated privileges to perform command injection or cause a recoverable denial of service using a specially crafted…

CVSS 3.1HIGH 7.2 Network High privileges No interaction EPSS 0.01032 Published 2024-09-13 Fixed in 4.71 AFBT48C, 2.10 CTX312G +16 CWE-78
TI-2024-07675 CVE-2024-8279 · GHSA-vp87-57rp-pq64

OS command injection in Lenovo HX5530 Appliance XCC

Priority LOW 36

A privilege escalation vulnerability was discovered in XCC that could allow a valid, authenticated XCC user with elevated privileges to perform command injection via specially crafted file uploads.

CVSS 3.1HIGH 7.2 Network High privileges No interaction EPSS 0.01099 Published 2024-09-13 Fixed in 4.71 AFBT48C, 2.10 CTX312G +16 CWE-78
TI-2024-07674 CVE-2024-8278 · GHSA-jfrm-qx4v-5m72

OS command injection in Lenovo HX5530 Appliance XCC

Priority LOW 36

A privilege escalation vulnerability was discovered in XCC that could allow a valid, authenticated XCC user with elevated privileges to perform command injection via specially crafted IPMI commands.

CVSS 3.1HIGH 7.2 Network High privileges No interaction EPSS 0.01099 Published 2024-09-13 Fixed in 4.71 AFBT48C, 2.10 CTX312G +16 CWE-78