CVE-2023-0683
A valid, authenticated XCC user with read only access may gain elevated privileges through a...
8.3 High
A valid, authenticated XCC user with read only access may gain elevated privileges through a specifically crafted API call.
Attack profile
How easy it is to exploit
- Attack vector
- Network
- Complexity
- Low
- Privileges needed
- Low
- User interaction
- None
What an attacker can affect
- Confidentiality
- High
- Integrity
- Low
- Availability
- High
Exploit likelihood
0.57%Up 0.5 points since May 2, 2023
What each source reports
CVE List Score used
A valid, authenticated XCC user with read only access may gain elevated privileges through a specifically crafted API call.
- Record
CVE-2023-0683- CVSS 3.1
- 8.3 High
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:L/A:H - Weakness
- CWE-20
- Updated
- 2026-11-02
EUVDEUVD-2023-12712
A valid, authenticated XCC user with read only access may gain elevated privileges through a specifically crafted API call.
- Record
EUVD-2023-12712- CVSS 3.1
- 8.3 High
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:L/A:H - Updated
- 2026-11-03
GitHub AdvisoriesGHSA-p2jf-cw3h-mcrc
A valid, authenticated XCC user with read only access may gain elevated privileges through a...
A valid, authenticated XCC user with read only access may gain elevated privileges through a specifically crafted API call.
- Record
GHSA-p2jf-cw3h-mcrc- CVSS 3.1
- 8.3 High
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:L/A:H - Weakness
- CWE-20
- Updated
- 2026-11-02
NVD
A valid, authenticated XCC user with read only access may gain elevated privileges through a specifically crafted API call.
- Record
CVE-2023-0683- CVSS 3.1
- 8.3 High
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:L/A:H - CVSS 3.1
- 8.8 High
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H - Weakness
- CWE-20
- Updated
- 2026-11-02
Affected products
- lenovo thinkagile hx1021 firmware
- lenovo thinkagile hx1320 firmware
- lenovo thinkagile hx1321 firmware
- lenovo thinkagile hx1331 firmware
- lenovo thinkagile hx1520-r firmware
- lenovo thinkagile hx1521-r firmware
- lenovo thinkagile hx2320-e firmware
- lenovo thinkagile hx2321 firmware
- lenovo thinkagile hx2330 firmware
- lenovo thinkagile hx2331 firmware
- lenovo thinkagile hx2720-e firmware
- lenovo thinkagile hx3320 firmware
Show 98 moreShow less
- lenovo thinkagile hx3321 firmware
- lenovo thinkagile hx3330 firmware
- lenovo thinkagile hx3331 firmware
- lenovo thinkagile hx3375 firmware
- lenovo thinkagile hx3376 firmware
- lenovo thinkagile hx3520-g firmware
- lenovo thinkagile hx3521-g firmware
- lenovo thinkagile hx3720 firmware
- lenovo thinkagile hx3721 firmware
- lenovo thinkagile hx5520-c firmware
- lenovo thinkagile hx5520 firmware
- lenovo thinkagile hx5521-c firmware
- lenovo thinkagile hx5521 firmware
- lenovo thinkagile hx5530 firmware
- lenovo thinkagile hx5531 firmware
- lenovo thinkagile hx7520 firmware
- lenovo thinkagile hx7521 firmware
- lenovo thinkagile hx7530 firmware
- lenovo thinkagile hx7531 firmware
- lenovo thinkagile hx7820 firmware
- lenovo thinkagile hx7821 firmware
- lenovo thinkagile hx enclosure firmware
- lenovo thinkagile mx1020 firmware
- lenovo thinkagile mx1021 on se350 firmware
- lenovo thinkagile mx3330-f firmware
- lenovo thinkagile mx3330-h firmware
- lenovo thinkagile mx3331-f firmware
- lenovo thinkagile mx3331-h firmware
- lenovo thinkagile mx3530-h firmware
- lenovo thinkagile mx3530 f firmware
- lenovo thinkagile mx3531-f firmware
- lenovo thinkagile mx3531 h firmware
- lenovo thinkagile vx1320 firmware
- lenovo thinkagile vx2320 firmware
- lenovo thinkagile vx2330 firmware
- lenovo thinkagile vx3320 firmware
- lenovo thinkagile vx3330 firmware
- lenovo thinkagile vx3331 firmware
- lenovo thinkagile vx3520-g firmware
- lenovo thinkagile vx3530-g firmware
- lenovo thinkagile vx3720 firmware
- lenovo thinkagile vx5520 firmware
- lenovo thinkagile vx5530 firmware
- lenovo thinkagile vx7320 n firmware
- lenovo thinkagile vx7330 firmware
- lenovo thinkagile vx7520 firmware
- lenovo thinkagile vx7520 n firmware
- lenovo thinkagile vx7530 firmware
- lenovo thinkagile vx7531 firmware
- lenovo thinkagile vx7820 firmware
- lenovo thinkagile vx 1se firmware
- lenovo thinkagile vx 2u4n firmware
- lenovo thinkagile vx 4u firmware
- lenovo thinkedge se450 firmware
- lenovo thinkstation p920 firmware
- lenovo thinksystem sd530 firmware
- lenovo thinksystem sd630 v2 firmware
- lenovo thinksystem sd650-n v2 firmware
- lenovo thinksystem sd650 firmware
- lenovo thinksystem sd650 v2 firmware
- lenovo thinksystem se350 firmware
- lenovo thinksystem sn550 firmware
- lenovo thinksystem sn550 v2 firmware
- lenovo thinksystem sn850 firmware
- lenovo thinksystem sr150 firmware
- lenovo thinksystem sr158 firmware
- lenovo thinksystem sr250 firmware
- lenovo thinksystem sr250 v2 firmware
- lenovo thinksystem sr258 firmware
- lenovo thinksystem sr258 v2 firmware
- lenovo thinksystem sr530 firmware
- lenovo thinksystem sr550 firmware
- lenovo thinksystem sr570 firmware
- lenovo thinksystem sr590 firmware
- lenovo thinksystem sr630 firmware
- lenovo thinksystem sr630 v2 firmware
- lenovo thinksystem sr645 firmware
- lenovo thinksystem sr645 v3 firmware
- lenovo thinksystem sr650 firmware
- lenovo thinksystem sr650 v2 firmware
- lenovo thinksystem sr665 firmware
- lenovo thinksystem sr665 v3 firmware
- lenovo thinksystem sr670 firmware
- lenovo thinksystem sr670 v2 firmware
- lenovo thinksystem sr850 firmware
- lenovo thinksystem sr850 v2 firmware
- lenovo thinksystem sr850p firmware
- lenovo thinksystem sr860 firmware
- lenovo thinksystem sr860 v2 firmware
- lenovo thinksystem sr950 firmware
- lenovo thinksystem st250 firmware
- lenovo thinksystem st250 v2 firmware
- lenovo thinksystem st258 firmware
- lenovo thinksystem st258 v2 firmware
- lenovo thinksystem st550 firmware
- lenovo thinksystem st650 v2 firmware
- lenovo thinksystem st658 v2 firmware
- lenovo xclarity controller
History
| Recorded | Changed | Sources |
|---|---|---|
| aliases, published | EUVD | |
| first indexed | CVE List, GitHub Advisories, NVD |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2023-0683 is a high vulnerability (CVSS 8.3) in Lenovo Thinkagile Hx1021 Firmware, published May 1, 2023. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 0.57%, the 47th percentile. No source names a fixed version.