CVE-2024-8280

An input validation weakness was discovered in XCC that could allow a valid, authenticated XCC user with elevated privileges to perform command injection or cause a recoverable denial of service using a specially crafted file.

Score
CVSS 3.1 7.2 High
Status
Deferred - psirt@lenovo.com
Published
2024-09-13
Last modified
2024-09-13
Weaknesses
CWE-78

Affected products

References