Thinkagile Hx Enclosure Certified Node Firmware (Lenovo) - vulnerabilities (CVEs)
15 CVEs, 0 in the last 30 days, 3 known versions, newest CVE from 2024-09-13. Vendor: Lenovo.
CVEs of Thinkagile Hx Enclosure Certified Node Firmware
- CVE-2024-8281 - CVSS 7.2 (high), 2024-09-13: An input validation weakness was discovered in XCC that could allow a valid, authenticated XCC user with elevated privileges to perform command injection…
- CVE-2024-8280 - CVSS 7.2 (high), 2024-09-13: An input validation weakness was discovered in XCC that could allow a valid, authenticated XCC user with elevated privileges to perform command injection or…
- CVE-2024-8279 - CVSS 7.2 (high), 2024-09-13: A privilege escalation vulnerability was discovered in XCC that could allow a valid, authenticated XCC user with elevated privileges to perform command…
- CVE-2024-8278 - CVSS 7.2 (high), 2024-09-13: A privilege escalation vulnerability was discovered in XCC that could allow a valid, authenticated XCC user with elevated privileges to perform command…
- CVE-2024-38511 - CVSS 7.2 (high), 2024-07-26: A privilege escalation vulnerability was discovered in an upload processing functionality of XCC that could allow an authenticated XCC user with elevated…
- CVE-2024-38510 - CVSS 7.2 (high), 2024-07-26: A privilege escalation vulnerability was discovered in the SSH captive command shell interface that could allow an authenticated XCC user with elevated…
- CVE-2024-38512 - CVSS 7.2 (high), 2024-07-26: A privilege escalation vulnerability was discovered in XCC that could allow an authenticated XCC user with elevated privileges to perform command injection…
- CVE-2024-38508 - CVSS 7.2 (high), 2024-07-26: A privilege escalation vulnerability was discovered in the web interface or SSH captive command shell interface of XCC that could allow an authenticated XCC…
- CVE-2024-38509 - CVSS 7.2 (high), 2024-07-26: A privilege escalation vulnerability was discovered in XCC that could allow an authenticated XCC user with elevated privileges to execute arbitrary code via a…
- CVE-2023-2993 - CVSS 6.3 (medium), 2023-06-26: A valid, authenticated user with limited privileges may be able to use specifically crafted web management server API calls to execute a limited number of…
- CVE-2023-2992 - CVSS 7.5 (high), 2023-06-26: An unauthenticated denial of service vulnerability exists in the SMM v1, SMM v2, and FPC management web server which can be triggered under crafted…
- CVE-2022-34884 - CVSS 7.2 (high), 2023-01-30: A buffer overflow exists in the Remote Presence subsystem which can potentially allow valid, authenticated users to cause a recoverable subsystem denial of…
- CVE-2022-34888 - CVSS 4.3 (medium), 2023-01-30: The Remote Mount feature can potentially be abused by valid, authenticated users to make connections to internal services that may not normally be accessible…
- CVE-2021-3897 - CVSS 9.8 (critical), 2022-04-22: An authentication bypass vulnerability was discovered in an internal service of the Lenovo Fan Power Controller2 (FPC2) and Lenovo System Management Module…
- CVE-2021-3849 - CVSS 9.8 (critical), 2022-04-22: An authentication bypass vulnerability was discovered in the web interface of the Lenovo Fan Power Controller2 (FPC2) and Lenovo System Management Module…
