Thinkagile Hx1021 Edg Firmware (Lenovo) - vulnerabilities (CVEs)
7 CVEs, 0 in the last 30 days, 2 known versions, newest CVE from 2024-07-26. Vendor: Lenovo.
CVEs of Thinkagile Hx1021 Edg Firmware
- CVE-2024-38510 - CVSS 7.2 (high), 2024-07-26: A privilege escalation vulnerability was discovered in the SSH captive command shell interface that could allow an authenticated XCC user with elevated…
- CVE-2024-38512 - CVSS 7.2 (high), 2024-07-26: A privilege escalation vulnerability was discovered in XCC that could allow an authenticated XCC user with elevated privileges to perform command injection…
- CVE-2024-38511 - CVSS 7.2 (high), 2024-07-26: A privilege escalation vulnerability was discovered in an upload processing functionality of XCC that could allow an authenticated XCC user with elevated…
- CVE-2024-38509 - CVSS 7.2 (high), 2024-07-26: A privilege escalation vulnerability was discovered in XCC that could allow an authenticated XCC user with elevated privileges to execute arbitrary code via a…
- CVE-2024-38508 - CVSS 7.2 (high), 2024-07-26: A privilege escalation vulnerability was discovered in the web interface or SSH captive command shell interface of XCC that could allow an authenticated XCC…
- CVE-2023-4607 - CVSS 8.8 (high), 2023-10-25: An authenticated XCC user can change permissions for any user through a crafted API command.
- CVE-2022-40137 - CVSS 6.7 (medium), 2023-01-30: A buffer overflow in the WMI SMI Handler in some Lenovo models may allow an attacker with local access and elevated privileges to execute arbitrary code.
