Skip to content

Lenovo Thinkagile Hx3375 Firmware vulnerabilities

lenovo hx1331 certified node (thinkagile) bios, hx2330 appliance (thinkagile) bios, hx2331 certified node (thinkagile) bios +112 more +114 moreAn internal product security audit discovered a UEFI SMM (System Management Mode) callout...CVE-2024-451056.7 MediumSeptember 13, 2024
lenovo hx enclosure certified node (thinkagile) xcc, hx1021 edge certified node 3yr (thinkagile) xcc, hx1320 appliance (thinkagile) xcc +155 more +157 moreAn input validation weakness was discovered in XCC that could allow a valid, authenticated XCC...CVE-2024-82817.2 HighSeptember 13, 2024
lenovo hx enclosure certified node (thinkagile) xcc, hx1021 edge certified node 3yr (thinkagile) xcc, hx1320 appliance (thinkagile) xcc +155 more +157 moreAn input validation weakness was discovered in XCC that could allow a valid, authenticated XCC...CVE-2024-82807.2 HighSeptember 13, 2024
lenovo hx enclosure certified node (thinkagile) xcc, hx1021 edge certified node 3yr (thinkagile) xcc, hx1320 appliance (thinkagile) xcc +155 more +157 moreA privilege escalation vulnerability was discovered in XCC that could allow a valid,...CVE-2024-82797.2 HighSeptember 13, 2024
lenovo hx enclosure certified node (thinkagile) xcc, hx1021 edge certified node 3yr (thinkagile) xcc, hx1320 appliance (thinkagile) xcc +155 more +157 moreA privilege escalation vulnerability was discovered in XCC that could allow a valid,...CVE-2024-82787.2 HighSeptember 13, 2024
lenovo thinkagile hx1021 edg firmware, thinkagile hx1320 firmware, thinkagile hx1321 firmware +108 more +110 moreA privilege escalation vulnerability was discovered in XCC that could allow an authenticated XCC...CVE-2024-385127.2 HighJuly 26, 2024
lenovo thinkagile hx1021 edg firmware, thinkagile hx1320 firmware, thinkagile hx1321 firmware +108 more +110 moreA privilege escalation vulnerability was discovered in an upload processing functionality of XCC...CVE-2024-385117.2 HighJuly 26, 2024
lenovo thinkagile hx1021 edg firmware, thinkagile hx1320 firmware, thinkagile hx1321 firmware +108 more +110 moreA privilege escalation vulnerability was discovered in the SSH captive command shell interface...CVE-2024-385107.2 HighJuly 26, 2024
lenovo thinkagile hx1021 edg firmware, thinkagile hx1320 firmware, thinkagile hx1321 firmware +108 more +110 moreA privilege escalation vulnerability was discovered in XCC that could allow an authenticated XCC...CVE-2024-385097.2 HighJuly 26, 2024
lenovo thinkagile hx1021 edg firmware, thinkagile hx1320 firmware, thinkagile hx1321 firmware +108 more +110 moreA privilege escalation vulnerability was discovered in the web interface or SSH captive command...CVE-2024-385087.2 HighJuly 26, 2024
lenovo xclarity controller (xcc), thinkagile hx1331 firmware, thinkagile hx2330 firmware +56 more +58 moreAn authenticated XCC user with elevated privileges can perform blind SQL injection in limited...CVE-2023-46084.1 MediumOctober 24, 2023
lenovo xclarity controller (xcc), thinkagile hx1021 edg firmware, thinkagile hx1320 firmware +121 more +123 moreAn authenticated XCC user can change permissions for any user through a crafted API command.CVE-2023-46077.5 HighOctober 24, 2023
lenovo xclarity controller (xcc), thinkagile hx1331 firmware, thinkagile hx2330 firmware +56 more +58 moreAn authenticated XCC user with Read-Only permission can change a different user’s password...CVE-2023-46068.1 HighOctober 24, 2023
lenovo thinkagile hx1021 firmware, thinkagile hx1320 firmware, thinkagile hx1321 firmware +107 more +109 moreA valid, authenticated XCC user with read only access may gain elevated privileges through a...CVE-2023-06838.3 HighMay 1, 2023
lenovo thinkagile hx1021 firmware, thinkagile hx1320 firmware, thinkagile hx1321 firmware +107 more +109 moreA valid, authenticated user may be able to trigger a denial of service of the XCC web user...CVE-2023-254926.3 MediumMay 1, 2023
lenovo thinkagile hx1021 firmware, thinkagile hx1320 firmware, thinkagile hx1321 firmware +107 more +109 moreA valid, authenticated administrative user can query a web interface API to reveal the configured...CVE-2023-254954.9 MediumApril 28, 2023
lenovo thinkagile hx1021 firmware, thinkagile hx1320 firmware, thinkagile hx1321 firmware +107 more +109 moreA valid LDAP user, under specific conditions, will default to read-only permissions when...CVE-2023-290565.3 MediumApril 28, 2023
lenovo thinkagile hx1021 firmware, thinkagile hx1320 firmware, thinkagile hx1321 firmware +107 more +109 moreA valid XCC user's local account permissions overrides their active directory permissions under...CVE-2023-290577.3 HighApril 28, 2023
lenovo thinkagile hx1021 firmware, thinkagile hx1320 firmware, thinkagile hx1321 firmware +107 more +109 moreA valid, authenticated XCC user with read-only permissions can modify custom user roles on other...CVE-2023-290586.4 MediumApril 28, 2023
lenovo xclarity controller, thinkagile hx1021 firmware, thinkagile hx1320 firmware +96 more +98 moreThe Remote Mount feature can potentially be abused by valid, authenticated users to make...CVE-2022-348882.7 LowJanuary 30, 2023
lenovo xclarity controller, thinkagile hx1021 firmware, thinkagile hx1320 firmware +96 more +98 moreA buffer overflow exists in the Remote Presence subsystem which can potentially allow valid,...CVE-2022-348847.2 HighJanuary 30, 2023
lenovo bios, ideacentre 3-07ada05 firmware, ideacentre 3-07imb05 firmware +285 more +287 moreA buffer overflow in the WMI SMI Handler in some Lenovo models may allow an attacker with local...CVE-2022-401376.7 MediumJanuary 30, 2023
lenovo bios, ideacentre 3-07ada05 firmware, ideacentre 3-07imb05 firmware +323 more +325 moreAn information leak vulnerability in the SMI Set BIOS Password SMI Handler in some Lenovo models...CVE-2022-401344.4 MediumJanuary 30, 2023