Skip to contentLenovo Thinkagile Hx Enclosure Firmware vulnerabilities
- lenovo fan power controller, nextscale n1200 enclosure firmware, smm, smm2, fpc +68 more +70 moreA command injection vulnerability was identified in SMM/SMM2 and FPC that could allow an...CVE-2024-26597.2 High
- lenovo xclarity controller (xcc), thinkagile hx1021 edg firmware, thinkagile hx1320 firmware +121 more +123 moreAn authenticated XCC user can change permissions for any user through a crafted API command.CVE-2023-46077.5 High
- lenovo fan power controller (fpc), nextscale n1200 enclosure firmware, system management module (smm) +8 more +10 moreAn unauthenticated denial of service vulnerability exists in the SMM v1, SMM v2, and FPC...CVE-2023-29927.5 High
- lenovo thinkagile hx1021 firmware, thinkagile hx1320 firmware, thinkagile hx1321 firmware +107 more +109 moreA valid, authenticated XCC user with read only access may gain elevated privileges through a...CVE-2023-06838.3 High
- lenovo thinkagile hx1021 firmware, thinkagile hx1320 firmware, thinkagile hx1321 firmware +107 more +109 moreA valid, authenticated user may be able to trigger a denial of service of the XCC web user...CVE-2023-254926.3 Medium
- lenovo thinkagile hx1021 firmware, thinkagile hx1320 firmware, thinkagile hx1321 firmware +107 more +109 moreA valid, authenticated administrative user can query a web interface API to reveal the configured...CVE-2023-254954.9 Medium
- lenovo thinkagile hx1021 firmware, thinkagile hx1320 firmware, thinkagile hx1321 firmware +107 more +109 moreA valid LDAP user, under specific conditions, will default to read-only permissions when...CVE-2023-290565.3 Medium
- lenovo thinkagile hx1021 firmware, thinkagile hx1320 firmware, thinkagile hx1321 firmware +107 more +109 moreA valid XCC user's local account permissions overrides their active directory permissions under...CVE-2023-290577.3 High
- lenovo thinkagile hx1021 firmware, thinkagile hx1320 firmware, thinkagile hx1321 firmware +107 more +109 moreA valid, authenticated XCC user with read-only permissions can modify custom user roles on other...CVE-2023-290586.4 Medium