CVE-2023-0683
A valid, authenticated XCC user with read only access may gain elevated privileges through a specifically crafted API call.
- Score
- CVSS 3.1 8.8 High
- Status
- Modified - psirt@lenovo.com
- Published
- 2023-05-01
- Last modified
- 2025-01-30
- Weaknesses
- CWE-20
Affected products
- Thinkagile Hx1021 Firmware (Lenovo)
- Thinkagile Hx1320 Firmware (Lenovo)
- Thinkagile Hx1321 Firmware (Lenovo)
- Thinkagile Hx1331 Firmware (Lenovo)
- Thinkagile Hx1520-r Firmware (Lenovo)
- Thinkagile Hx1521-r Firmware (Lenovo)
- Thinkagile Hx2320-e Firmware (Lenovo)
- Thinkagile Hx2321 Firmware (Lenovo)
- Thinkagile Hx2330 Firmware (Lenovo)
- Thinkagile Hx2331 Firmware (Lenovo)
- Thinkagile Hx2720-e Firmware (Lenovo)
- Thinkagile Hx3320 Firmware (Lenovo)
- Thinkagile Hx3321 Firmware (Lenovo)
- Thinkagile Hx3330 Firmware (Lenovo)
- Thinkagile Hx3331 Firmware (Lenovo)
- Thinkagile Hx3375 Firmware (Lenovo)
- Thinkagile Hx3376 Firmware (Lenovo)
- Thinkagile Hx3520-g Firmware (Lenovo)
- Thinkagile Hx3521-g Firmware (Lenovo)
- Thinkagile Hx3720 Firmware (Lenovo)
- Thinkagile Hx3721 Firmware (Lenovo)
- Thinkagile Hx5520-c Firmware (Lenovo)
- Thinkagile Hx5520 Firmware (Lenovo)
- Thinkagile Hx5521-c Firmware (Lenovo)
- Thinkagile Hx5521 Firmware (Lenovo)
- Thinkagile Hx5530 Firmware (Lenovo)
- Thinkagile Hx5531 Firmware (Lenovo)
- Thinkagile Hx7520 Firmware (Lenovo)
- Thinkagile Hx7521 Firmware (Lenovo)
- Thinkagile Hx7530 Firmware (Lenovo)
- Thinkagile Hx7531 Firmware (Lenovo)
- Thinkagile Hx7820 Firmware (Lenovo)
- Thinkagile Hx7821 Firmware (Lenovo)
- Thinkagile Hx Enclosure Firmware (Lenovo)
- Thinkagile Mx1020 Firmware (Lenovo)
- Thinkagile Mx1021 On Se350 Firmware (Lenovo)
- Thinkagile Mx3330-f Firmware (Lenovo)
- Thinkagile Mx3330-h Firmware (Lenovo)
- Thinkagile Mx3331-f Firmware (Lenovo)
- Thinkagile Mx3331-h Firmware (Lenovo)
- Thinkagile Mx3530-h Firmware (Lenovo)
- Thinkagile Mx3530 F Firmware (Lenovo)
- Thinkagile Mx3531-f Firmware (Lenovo)
- Thinkagile Mx3531 H Firmware (Lenovo)
- Thinkagile Vx1320 Firmware (Lenovo)
- Thinkagile Vx2320 Firmware (Lenovo)
- Thinkagile Vx2330 Firmware (Lenovo)
- Thinkagile Vx3320 Firmware (Lenovo)
- Thinkagile Vx3330 Firmware (Lenovo)
- Thinkagile Vx3331 Firmware (Lenovo)
- Thinkagile Vx3520-g Firmware (Lenovo)
- Thinkagile Vx3530-g Firmware (Lenovo)
- Thinkagile Vx3720 Firmware (Lenovo)
- Thinkagile Vx5520 Firmware (Lenovo)
- Thinkagile Vx5530 Firmware (Lenovo)
- Thinkagile Vx7320 N Firmware (Lenovo)
- Thinkagile Vx7330 Firmware (Lenovo)
- Thinkagile Vx7520 Firmware (Lenovo)
- Thinkagile Vx7520 N Firmware (Lenovo)
- Thinkagile Vx7530 Firmware (Lenovo)
- Thinkagile Vx7531 Firmware (Lenovo)
- Thinkagile Vx7820 Firmware (Lenovo)
- Thinkagile Vx 1se Firmware (Lenovo)
- Thinkagile Vx 2u4n Firmware (Lenovo)
- Thinkagile Vx 4u Firmware (Lenovo)
- Thinkedge Se450 Firmware (Lenovo)
- Thinkstation P920 Firmware (Lenovo)
- Thinksystem Sd530 Firmware (Lenovo)
- Thinksystem Sd630 V2 Firmware (Lenovo)
- Thinksystem Sd650-n V2 Firmware (Lenovo)
- Thinksystem Sd650 Firmware (Lenovo)
- Thinksystem Sd650 V2 Firmware (Lenovo)
- Thinksystem Se350 Firmware (Lenovo)
- Thinksystem Sn550 Firmware (Lenovo)
- Thinksystem Sn550 V2 Firmware (Lenovo)
- Thinksystem Sn850 Firmware (Lenovo)
- Thinksystem Sr150 Firmware (Lenovo)
- Thinksystem Sr158 Firmware (Lenovo)
- Thinksystem Sr250 Firmware (Lenovo)
- Thinksystem Sr250 V2 Firmware (Lenovo)
- Thinksystem Sr258 Firmware (Lenovo)
- Thinksystem Sr258 V2 Firmware (Lenovo)
- Thinksystem Sr530 Firmware (Lenovo)
- Thinksystem Sr550 Firmware (Lenovo)
- Thinksystem Sr570 Firmware (Lenovo)
- Thinksystem Sr590 Firmware (Lenovo)
- Thinksystem Sr630 Firmware (Lenovo)
- Thinksystem Sr630 V2 Firmware (Lenovo)
- Thinksystem Sr645 Firmware (Lenovo)
- Thinksystem Sr645 V3 Firmware (Lenovo)
- Thinksystem Sr650 Firmware (Lenovo)
- Thinksystem Sr650 V2 Firmware (Lenovo)
- Thinksystem Sr665 Firmware (Lenovo)
- Thinksystem Sr665 V3 Firmware (Lenovo)
- Thinksystem Sr670 Firmware (Lenovo)
- Thinksystem Sr670 V2 Firmware (Lenovo)
- Thinksystem Sr850 Firmware (Lenovo)
- Thinksystem Sr850 V2 Firmware (Lenovo)
- Thinksystem Sr850p Firmware (Lenovo)
- Thinksystem Sr860 Firmware (Lenovo)
References
- https://support.lenovo.com/us/en/product_security/LEN-99936
