CVE-2024-38509

A privilege escalation vulnerability was discovered in XCC that could allow an authenticated XCC user with elevated privileges to execute arbitrary code via a specially crafted IPMI command.

Score
CVSS 3.1 7.2 High
Status
Deferred - psirt@lenovo.com
Published
2024-07-26
Last modified
2024-08-02
Weaknesses
CWE-121

Affected products

References

 
 
© AVABIS GmbH privacypolicy about