{"id":"CVE-2023-4606","aliases":["EUVD-2023-54459","GHSA-fm9p-5c8h-mw8h"],"status":"published","title":"An authenticated XCC user with Read-Only permission can change a different user’s password...","description":"An authenticated XCC user with Read-Only permission can change a different user’s password through a crafted API command.  \n\nThis affects ThinkSystem v2 and v3 servers with XCC; ThinkSystem v1 servers are not affected.","severity":{"version":"3.1","score":8.1,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H","level":"high","assessor":"cna","from":"cve"},"epss":{"day":"2026-11-10","score":0.00556,"percentile":0.4669,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":false},"cwes":["CWE-862"],"published":"2023-10-24T20:25:09Z","modified":"2026-06-17T06:38:12Z","products":[{"vendor":"lenovo","product":"lenovo xclarity controller (xcc)"},{"vendor":"lenovo","product":"thinkagile_hx1331_firmware"},{"vendor":"lenovo","product":"thinkagile_hx2330_firmware"},{"vendor":"lenovo","product":"thinkagile_hx2331_firmware"},{"vendor":"lenovo","product":"thinkagile_hx3330_firmware"},{"vendor":"lenovo","product":"thinkagile_hx3331_firmware"},{"vendor":"lenovo","product":"thinkagile_hx3375_firmware"},{"vendor":"lenovo","product":"thinkagile_hx3376_firmware"},{"vendor":"lenovo","product":"thinkagile_hx5530_firmware"},{"vendor":"lenovo","product":"thinkagile_hx5531_firmware"},{"vendor":"lenovo","product":"thinkagile_hx7530_firmware"},{"vendor":"lenovo","product":"thinkagile_hx7531_firmware"},{"vendor":"lenovo","product":"thinkagile_mx3330-f_all-flash_firmware"},{"vendor":"lenovo","product":"thinkagile_mx3330-h_hybrid_firmware"},{"vendor":"lenovo","product":"thinkagile_mx3331-f_all-flash_firmware"},{"vendor":"lenovo","product":"thinkagile_mx3331-h_hybrid_firmware"},{"vendor":"lenovo","product":"thinkagile_mx3530-h_hybrid_firmware"},{"vendor":"lenovo","product":"thinkagile_mx3530_f_all_flash_firmware"},{"vendor":"lenovo","product":"thinkagile_mx3531-f_all-flash_firmware"},{"vendor":"lenovo","product":"thinkagile_mx3531_h_hybrid_firmware"},{"vendor":"lenovo","product":"thinkagile_vx2330_firmware"},{"vendor":"lenovo","product":"thinkagile_vx3330_firmware"},{"vendor":"lenovo","product":"thinkagile_vx3331_firmware"},{"vendor":"lenovo","product":"thinkagile_vx3530-g_firmware"},{"vendor":"lenovo","product":"thinkagile_vx5530_firmware"},{"vendor":"lenovo","product":"thinkagile_vx7330_firmware"},{"vendor":"lenovo","product":"thinkagile_vx7530_firmware"},{"vendor":"lenovo","product":"thinkagile_vx7531_firmware"},{"vendor":"lenovo","product":"thinksystem_sd630_v2_firmware"},{"vendor":"lenovo","product":"thinksystem_sd650-n_v2_firmware"},{"vendor":"lenovo","product":"thinksystem_sd650_v2_firmware"},{"vendor":"lenovo","product":"thinksystem_sd650_v3_firmware"},{"vendor":"lenovo","product":"thinksystem_sd665_v3_firmware"},{"vendor":"lenovo","product":"thinksystem_sn550_v2_firmware"},{"vendor":"lenovo","product":"thinksystem_sr250_firmware"},{"vendor":"lenovo","product":"thinksystem_sr258_v2_firmware"},{"vendor":"lenovo","product":"thinksystem_sr630_v2_firmware"},{"vendor":"lenovo","product":"thinksystem_sr630_v3_firmware"},{"vendor":"lenovo","product":"thinksystem_sr635_v3_firmware"},{"vendor":"lenovo","product":"thinksystem_sr645_firmware"},{"vendor":"lenovo","product":"thinksystem_sr645_v3_firmware"},{"vendor":"lenovo","product":"thinksystem_sr650_v2_firmware"},{"vendor":"lenovo","product":"thinksystem_sr650_v3_firmware"},{"vendor":"lenovo","product":"thinksystem_sr655_v3_firmware"},{"vendor":"lenovo","product":"thinksystem_sr665_firmware"},{"vendor":"lenovo","product":"thinksystem_sr665_v3_firmware"},{"vendor":"lenovo","product":"thinksystem_sr670_firmware"},{"vendor":"lenovo","product":"thinksystem_sr670_v2_firmware"},{"vendor":"lenovo","product":"thinksystem_sr675_v3_firmware"},{"vendor":"lenovo","product":"thinksystem_sr850_v2_firmware"},{"vendor":"lenovo","product":"thinksystem_sr850_v3_firmware"},{"vendor":"lenovo","product":"thinksystem_sr860_v2_firmware"},{"vendor":"lenovo","product":"thinksystem_sr860_v3_firmware"},{"vendor":"lenovo","product":"thinksystem_st250_v2_firmware"},{"vendor":"lenovo","product":"thinksystem_st258_v2_firmware"},{"vendor":"lenovo","product":"thinksystem_st650_v2_firmware"},{"vendor":"lenovo","product":"thinksystem_st650_v3_firmware"},{"vendor":"lenovo","product":"thinksystem_st658_v2_firmware"},{"vendor":"lenovo","product":"thinksystem_st658_v3_firmware"}],"references":[{"url":"https://support.lenovo.com/us/en/product_security/LEN-140960","tags":["x_transferred","Vendor Advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2023-4606"},{"url":"https://github.com/advisories/GHSA-fm9p-5c8h-mw8h"}],"sources":{"cve":[{"id":"CVE-2023-4606","description":"An authenticated XCC user with Read-Only permission can change a different user’s password through a crafted API command.  \n\nThis affects ThinkSystem v2 and v3 servers with XCC; ThinkSystem v1 servers are not affected.","status":"published","published":"2023-10-24T20:25:09.243Z","modified":"2024-09-11T18:24:50.644Z","cvss":[{"version":"3.1","score":8.1,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H","level":"high","assessor":"cna"}],"cwes":["CWE-862"],"updated_at":"2026-11-02T14:35:30.116696Z"}],"euvd":[{"id":"EUVD-2023-54459","description":"An authenticated XCC user with Read-Only permission can change a different user’s password through a crafted API command.  \n\nThis affects ThinkSystem v2 and v3 servers with XCC; ThinkSystem v1 servers are not affected.","status":"published","published":"2023-10-24T20:25:09Z","modified":"2024-09-11T18:24:50Z","cvss":[{"version":"3.1","score":8.1,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H","level":"high"}],"updated_at":"2026-11-03T00:55:57.81164Z"}],"ghsa":[{"id":"GHSA-fm9p-5c8h-mw8h","title":"An authenticated XCC user with Read-Only permission can change a different user’s password...","description":"An authenticated XCC user with Read-Only permission can change a different user’s password through a crafted API command.  \n\nThis affects ThinkSystem v2 and v3 servers with XCC; ThinkSystem v1 servers are not affected.","status":"published","published":"2023-10-25T18:32:25Z","modified":"2023-11-16T05:04:25Z","cvss":[{"version":"3.1","score":8.1,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H","level":"high"}],"cwes":["CWE-862"],"updated_at":"2026-11-02T14:55:02.891904Z"}],"nvd":[{"id":"CVE-2023-4606","description":"An authenticated XCC user with Read-Only permission can change a different user’s password through a crafted API command.  \n\nThis affects ThinkSystem v2 and v3 servers with XCC; ThinkSystem v1 servers are not affected.","status":"published","published":"2023-10-25T18:17:41.487Z","modified":"2026-06-17T06:38:12.253Z","cvss":[{"version":"3.1","score":8.1,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H","level":"high","assessor":"secondary"},{"version":"3.1","score":8.1,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H","level":"high","assessor":"primary"}],"cwes":["CWE-862"],"updated_at":"2026-11-02T14:08:40.004465Z"}]}}