CVE-2024-8281

An input validation weakness was discovered in XCC that could allow a valid, authenticated XCC user with elevated privileges to perform command injection through specially crafted command line input in the XCC SSH captive shell.

Score
CVSS 3.1 7.2 High
Status
Deferred - psirt@lenovo.com
Published
2024-09-13
Last modified
2024-09-13
Weaknesses
CWE-78

Affected products

References

 
 
© AVABIS GmbH privacypolicy about