CVE-2023-4607
An authenticated XCC user can change permissions for any user through a crafted API command.
- Score
- CVSS 3.1 8.8 High
- Status
- Modified - psirt@lenovo.com
- Published
- 2023-10-25
- Last modified
- 2024-12-03
- Weaknesses
- CWE-269
Affected products
- Lenovo Xclarity Controller Xcc (Lenovo)
- Thinkagile Hx1021 Edg Firmware (Lenovo)
- Thinkagile Hx1320 Firmware (Lenovo)
- Thinkagile Hx1321 Firmware (Lenovo)
- Thinkagile Hx1331 Firmware (Lenovo)
- Thinkagile Hx1520-r Firmware (Lenovo)
- Thinkagile Hx1521-r Firmware (Lenovo)
- Thinkagile Hx2320-e Firmware (Lenovo)
- Thinkagile Hx2321 Firmware (Lenovo)
- Thinkagile Hx2330 Firmware (Lenovo)
- Thinkagile Hx2331 Firmware (Lenovo)
- Thinkagile Hx2720-e Firmware (Lenovo)
- Thinkagile Hx3320 Firmware (Lenovo)
- Thinkagile Hx3321 Firmware (Lenovo)
- Thinkagile Hx3330 Firmware (Lenovo)
- Thinkagile Hx3331 Firmware (Lenovo)
- Thinkagile Hx3375 Firmware (Lenovo)
- Thinkagile Hx3376 Firmware (Lenovo)
- Thinkagile Hx3520-g Firmware (Lenovo)
- Thinkagile Hx3521-g Firmware (Lenovo)
- Thinkagile Hx3720 Firmware (Lenovo)
- Thinkagile Hx3721 Firmware (Lenovo)
- Thinkagile Hx5520-c Firmware (Lenovo)
- Thinkagile Hx5520 Firmware (Lenovo)
- Thinkagile Hx5521-c Firmware (Lenovo)
- Thinkagile Hx5521 Firmware (Lenovo)
- Thinkagile Hx5530 Firmware (Lenovo)
- Thinkagile Hx5531 Firmware (Lenovo)
- Thinkagile Hx7520 Firmware (Lenovo)
- Thinkagile Hx7521 Firmware (Lenovo)
- Thinkagile Hx7530 Firmware (Lenovo)
- Thinkagile Hx7531 Firmware (Lenovo)
- Thinkagile Hx7820 Firmware (Lenovo)
- Thinkagile Hx7821 Firmware (Lenovo)
- Thinkagile Hx Enclosure Firmware (Lenovo)
- Thinkagile Mx1021 On Se350 Firmware (Lenovo)
- Thinkagile Mx3330-f All-flash Firmware (Lenovo)
- Thinkagile Mx3330-h Hybrid Firmware (Lenovo)
- Thinkagile Mx3331-f All-flash Firmware (Lenovo)
- Thinkagile Mx3331-h Hybrid Firmware (Lenovo)
- Thinkagile Mx3530-h Hybrid Firmware (Lenovo)
- Thinkagile Mx3530 F All Flash Firmware (Lenovo)
- Thinkagile Mx3531-f All-flash Firmware (Lenovo)
- Thinkagile Mx3531 H Hybrid Firmware (Lenovo)
- Thinkagile Mx630 V3 Firmware (Lenovo)
- Thinkagile Mx630 V3 Intergrated System Firmware (Lenovo)
- Thinkagile Mx650 V3 Firmware (Lenovo)
- Thinkagile Mx650 V3 Intergrated System Firmware (Lenovo)
- Thinkagile Mx Edge- Mx1020 Firmware (Lenovo)
- Thinkagile Vx1320 Firmware (Lenovo)
- Thinkagile Vx2320 Firmware (Lenovo)
- Thinkagile Vx2330 Firmware (Lenovo)
- Thinkagile Vx3320 Firmware (Lenovo)
- Thinkagile Vx3330 Firmware (Lenovo)
- Thinkagile Vx3331 Firmware (Lenovo)
- Thinkagile Vx3520-g Firmware (Lenovo)
- Thinkagile Vx3530-g Firmware (Lenovo)
- Thinkagile Vx3720 Firmware (Lenovo)
- Thinkagile Vx5520 Firmware (Lenovo)
- Thinkagile Vx5530 Firmware (Lenovo)
- Thinkagile Vx7320 N Firmware (Lenovo)
- Thinkagile Vx7330 Firmware (Lenovo)
- Thinkagile Vx7520 Firmware (Lenovo)
- Thinkagile Vx7520 N Firmware (Lenovo)
- Thinkagile Vx7530 Firmware (Lenovo)
- Thinkagile Vx7531 Firmware (Lenovo)
- Thinkagile Vx7820 Firmware (Lenovo)
- Thinkagile Vx 1se Firmware (Lenovo)
- Thinkagile Vx 2u4n Firmware (Lenovo)
- Thinkagile Vx 4u Firmware (Lenovo)
- Thinkedge Se450 Firmware (Lenovo)
- Thinksystem Sd530 Firmware (Lenovo)
- Thinksystem Sd630 V2 Firmware (Lenovo)
- Thinksystem Sd650-n V2 Firmware (Lenovo)
- Thinksystem Sd650 Dual Node Tray Firmware (Lenovo)
- Thinksystem Sd650 Dwc Dual Node Tray Firmware (Lenovo)
- Thinksystem Sd650 V2 Firmware (Lenovo)
- Thinksystem Sd650 V3 Firmware (Lenovo)
- Thinksystem Sd665 V3 Firmware (Lenovo)
- Thinksystem Se350 Firmware (Lenovo)
- Thinksystem Sn550 Firmware (Lenovo)
- Thinksystem Sn550 V2 Firmware (Lenovo)
- Thinksystem Sn850 Firmware (Lenovo)
- Thinksystem Sr150 Firmware (Lenovo)
- Thinksystem Sr158 Firmware (Lenovo)
- Thinksystem Sr250 Firmware (Lenovo)
- Thinksystem Sr258 Firmware (Lenovo)
- Thinksystem Sr258 V2 Firmware (Lenovo)
- Thinksystem Sr530 Firmware (Lenovo)
- Thinksystem Sr550 Firmware (Lenovo)
- Thinksystem Sr570 Firmware (Lenovo)
- Thinksystem Sr590 Firmware (Lenovo)
- Thinksystem Sr630 Firmware (Lenovo)
- Thinksystem Sr630 V2 Firmware (Lenovo)
- Thinksystem Sr630 V3 Firmware (Lenovo)
- Thinksystem Sr635 V3 Firmware (Lenovo)
- Thinksystem Sr645 Firmware (Lenovo)
- Thinksystem Sr645 V3 Firmware (Lenovo)
- Thinksystem Sr650 Firmware (Lenovo)
- Thinksystem Sr650 V2 Firmware (Lenovo)
References
- https://support.lenovo.com/us/en/product_security/LEN-140960
