Metrics
No CVSS v4.0
Attack Vector Network
Attack Complexity Low
Privileges Required Low
Scope Unchanged
Confidentiality Impact Low
Integrity Impact Low
Availability Impact Low
User Interaction None
No CVSS v3.0
No CVSS v2
This CVE is not in the KEV list.
The EPSS score is 0.00151.
Exploitation none
Automatable no
Technical Impact partial
Affected Vendors & Products
| Vendors | Products |
|---|---|
|
Lenovo
Subscribe
|
Thinkagile Hx1021
Subscribe
Thinkagile Hx1021 Firmware
Subscribe
Thinkagile Hx1320
Subscribe
Thinkagile Hx1320 Firmware
Subscribe
Thinkagile Hx1321
Subscribe
Thinkagile Hx1321 Firmware
Subscribe
Thinkagile Hx1331
Subscribe
Thinkagile Hx1331 Firmware
Subscribe
Thinkagile Hx1520-r
Subscribe
Thinkagile Hx1520-r Firmware
Subscribe
Thinkagile Hx1521-r
Subscribe
Thinkagile Hx1521-r Firmware
Subscribe
Thinkagile Hx2320-e
Subscribe
Thinkagile Hx2320-e Firmware
Subscribe
Thinkagile Hx2321
Subscribe
Thinkagile Hx2321 Firmware
Subscribe
Thinkagile Hx2330
Subscribe
Thinkagile Hx2330 Firmware
Subscribe
Thinkagile Hx2331
Subscribe
Thinkagile Hx2331 Firmware
Subscribe
Thinkagile Hx2720-e
Subscribe
Thinkagile Hx2720-e Firmware
Subscribe
Thinkagile Hx3320
Subscribe
Thinkagile Hx3320 Firmware
Subscribe
Thinkagile Hx3321
Subscribe
Thinkagile Hx3321 Firmware
Subscribe
Thinkagile Hx3330
Subscribe
Thinkagile Hx3330 Firmware
Subscribe
Thinkagile Hx3331
Subscribe
Thinkagile Hx3331 Firmware
Subscribe
Thinkagile Hx3375
Subscribe
Thinkagile Hx3375 Firmware
Subscribe
Thinkagile Hx3376
Subscribe
Thinkagile Hx3376 Firmware
Subscribe
Thinkagile Hx3520-g
Subscribe
Thinkagile Hx3520-g Firmware
Subscribe
Thinkagile Hx3521-g
Subscribe
Thinkagile Hx3521-g Firmware
Subscribe
Thinkagile Hx3720
Subscribe
Thinkagile Hx3720 Firmware
Subscribe
Thinkagile Hx3721
Subscribe
Thinkagile Hx3721 Firmware
Subscribe
Thinkagile Hx5520
Subscribe
Thinkagile Hx5520-c
Subscribe
Thinkagile Hx5520-c Firmware
Subscribe
Thinkagile Hx5520 Firmware
Subscribe
Thinkagile Hx5521
Subscribe
Thinkagile Hx5521-c
Subscribe
Thinkagile Hx5521-c Firmware
Subscribe
Thinkagile Hx5521 Firmware
Subscribe
Thinkagile Hx5530
Subscribe
Thinkagile Hx5530 Firmware
Subscribe
Thinkagile Hx5531
Subscribe
Thinkagile Hx5531 Firmware
Subscribe
Thinkagile Hx7520
Subscribe
Thinkagile Hx7520 Firmware
Subscribe
Thinkagile Hx7521
Subscribe
Thinkagile Hx7521 Firmware
Subscribe
Thinkagile Hx7530
Subscribe
Thinkagile Hx7530 Firmware
Subscribe
Thinkagile Hx7531
Subscribe
Thinkagile Hx7531 Firmware
Subscribe
Thinkagile Hx7820
Subscribe
Thinkagile Hx7820 Firmware
Subscribe
Thinkagile Hx7821
Subscribe
Thinkagile Hx7821 Firmware
Subscribe
Thinkagile Hx Enclosure
Subscribe
Thinkagile Hx Enclosure Firmware
Subscribe
Thinkagile Mx1020
Subscribe
Thinkagile Mx1020 Firmware
Subscribe
Thinkagile Mx1021 On Se350
Subscribe
Thinkagile Mx1021 On Se350 Firmware
Subscribe
Thinkagile Mx3330-f
Subscribe
Thinkagile Mx3330-f Firmware
Subscribe
Thinkagile Mx3330-h
Subscribe
Thinkagile Mx3330-h Firmware
Subscribe
Thinkagile Mx3331-f
Subscribe
Thinkagile Mx3331-f Firmware
Subscribe
Thinkagile Mx3331-h
Subscribe
Thinkagile Mx3331-h Firmware
Subscribe
Thinkagile Mx3530-h
Subscribe
Thinkagile Mx3530-h Firmware
Subscribe
Thinkagile Mx3530 F
Subscribe
Thinkagile Mx3530 F Firmware
Subscribe
Thinkagile Mx3531-f
Subscribe
Thinkagile Mx3531-f Firmware
Subscribe
Thinkagile Mx3531 H
Subscribe
Thinkagile Mx3531 H Firmware
Subscribe
Thinkagile Vx1320
Subscribe
Thinkagile Vx1320 Firmware
Subscribe
Thinkagile Vx2320
Subscribe
Thinkagile Vx2320 Firmware
Subscribe
Thinkagile Vx2330
Subscribe
Thinkagile Vx2330 Firmware
Subscribe
Thinkagile Vx3320
Subscribe
Thinkagile Vx3320 Firmware
Subscribe
Thinkagile Vx3330
Subscribe
Thinkagile Vx3330 Firmware
Subscribe
Thinkagile Vx3331
Subscribe
Thinkagile Vx3331 Firmware
Subscribe
Thinkagile Vx3520-g
Subscribe
Thinkagile Vx3520-g Firmware
Subscribe
Thinkagile Vx3530-g
Subscribe
Thinkagile Vx3530-g Firmware
Subscribe
Thinkagile Vx3720
Subscribe
Thinkagile Vx3720 Firmware
Subscribe
Thinkagile Vx5520
Subscribe
Thinkagile Vx5520 Firmware
Subscribe
Thinkagile Vx5530
Subscribe
Thinkagile Vx5530 Firmware
Subscribe
Thinkagile Vx7320 N
Subscribe
Thinkagile Vx7320 N Firmware
Subscribe
Thinkagile Vx7330
Subscribe
Thinkagile Vx7330 Firmware
Subscribe
Thinkagile Vx7520
Subscribe
Thinkagile Vx7520 Firmware
Subscribe
Thinkagile Vx7520 N
Subscribe
Thinkagile Vx7520 N Firmware
Subscribe
Thinkagile Vx7530
Subscribe
Thinkagile Vx7530 Firmware
Subscribe
Thinkagile Vx7531
Subscribe
Thinkagile Vx7531 Firmware
Subscribe
Thinkagile Vx7820
Subscribe
Thinkagile Vx7820 Firmware
Subscribe
Thinkagile Vx 1se
Subscribe
Thinkagile Vx 1se Firmware
Subscribe
Thinkagile Vx 2u4n
Subscribe
Thinkagile Vx 2u4n Firmware
Subscribe
Thinkagile Vx 4u
Subscribe
Thinkagile Vx 4u Firmware
Subscribe
Thinkedge Se450
Subscribe
Thinkedge Se450 Firmware
Subscribe
Thinkstation P920
Subscribe
Thinkstation P920 Firmware
Subscribe
Thinksystem Sd530
Subscribe
Thinksystem Sd530 Firmware
Subscribe
Thinksystem Sd630 V2
Subscribe
Thinksystem Sd630 V2 Firmware
Subscribe
Thinksystem Sd650
Subscribe
Thinksystem Sd650-n V2
Subscribe
Thinksystem Sd650-n V2 Firmware
Subscribe
Thinksystem Sd650 Firmware
Subscribe
Thinksystem Sd650 V2
Subscribe
Thinksystem Sd650 V2 Firmware
Subscribe
Thinksystem Se350
Subscribe
Thinksystem Se350 Firmware
Subscribe
Thinksystem Sn550
Subscribe
Thinksystem Sn550 Firmware
Subscribe
Thinksystem Sn550 V2
Subscribe
Thinksystem Sn550 V2 Firmware
Subscribe
Thinksystem Sn850
Subscribe
Thinksystem Sn850 Firmware
Subscribe
Thinksystem Sr150
Subscribe
Thinksystem Sr150 Firmware
Subscribe
Thinksystem Sr158
Subscribe
Thinksystem Sr158 Firmware
Subscribe
Thinksystem Sr250
Subscribe
Thinksystem Sr250 Firmware
Subscribe
Thinksystem Sr250 V2
Subscribe
Thinksystem Sr250 V2 Firmware
Subscribe
Thinksystem Sr258
Subscribe
Thinksystem Sr258 Firmware
Subscribe
Thinksystem Sr258 V2
Subscribe
Thinksystem Sr258 V2 Firmware
Subscribe
Thinksystem Sr530
Subscribe
Thinksystem Sr530 Firmware
Subscribe
Thinksystem Sr550
Subscribe
Thinksystem Sr550 Firmware
Subscribe
Thinksystem Sr570
Subscribe
Thinksystem Sr570 Firmware
Subscribe
Thinksystem Sr590
Subscribe
Thinksystem Sr590 Firmware
Subscribe
Thinksystem Sr630
Subscribe
Thinksystem Sr630 Firmware
Subscribe
Thinksystem Sr630 V2
Subscribe
Thinksystem Sr630 V2 Firmware
Subscribe
Thinksystem Sr645
Subscribe
Thinksystem Sr645 Firmware
Subscribe
Thinksystem Sr645 V3
Subscribe
Thinksystem Sr645 V3 Firmware
Subscribe
Thinksystem Sr650
Subscribe
Thinksystem Sr650 Firmware
Subscribe
Thinksystem Sr650 V2
Subscribe
Thinksystem Sr650 V2 Firmware
Subscribe
Thinksystem Sr665
Subscribe
Thinksystem Sr665 Firmware
Subscribe
Thinksystem Sr665 V3
Subscribe
Thinksystem Sr665 V3 Firmware
Subscribe
Thinksystem Sr670
Subscribe
Thinksystem Sr670 Firmware
Subscribe
Thinksystem Sr670 V2
Subscribe
Thinksystem Sr670 V2 Firmware
Subscribe
Thinksystem Sr850
Subscribe
Thinksystem Sr850 Firmware
Subscribe
Thinksystem Sr850 V2
Subscribe
Thinksystem Sr850 V2 Firmware
Subscribe
Thinksystem Sr850p
Subscribe
Thinksystem Sr850p Firmware
Subscribe
Thinksystem Sr860
Subscribe
Thinksystem Sr860 Firmware
Subscribe
Thinksystem Sr860 V2
Subscribe
Thinksystem Sr860 V2 Firmware
Subscribe
Thinksystem Sr950
Subscribe
Thinksystem Sr950 Firmware
Subscribe
Thinksystem St250
Subscribe
Thinksystem St250 Firmware
Subscribe
Thinksystem St250 V2
Subscribe
Thinksystem St250 V2 Firmware
Subscribe
Thinksystem St258
Subscribe
Thinksystem St258 Firmware
Subscribe
Thinksystem St258 V2
Subscribe
Thinksystem St258 V2 Firmware
Subscribe
Thinksystem St550
Subscribe
Thinksystem St550 Firmware
Subscribe
Thinksystem St650 V2
Subscribe
Thinksystem St650 V2 Firmware
Subscribe
Thinksystem St658 V2
Subscribe
Thinksystem St658 V2 Firmware
Subscribe
|
Configuration 1 [-]
| AND |
|
Configuration 2 [-]
| AND |
|
Configuration 3 [-]
| AND |
|
Configuration 4 [-]
| AND |
|
Configuration 5 [-]
| AND |
|
Configuration 6 [-]
| AND |
|
Configuration 7 [-]
| AND |
|
Configuration 8 [-]
| AND |
|
Configuration 9 [-]
| AND |
|
Configuration 10 [-]
| AND |
|
Configuration 11 [-]
| AND |
|
Configuration 12 [-]
| AND |
|
Configuration 13 [-]
| AND |
|
Configuration 14 [-]
| AND |
|
Configuration 15 [-]
| AND |
|
Configuration 16 [-]
| AND |
|
Configuration 17 [-]
| AND |
|
Configuration 18 [-]
| AND |
|
Configuration 19 [-]
| AND |
|
Configuration 20 [-]
| AND |
|
Configuration 21 [-]
| AND |
|
Configuration 22 [-]
| AND |
|
Configuration 23 [-]
| AND |
|
Configuration 24 [-]
| AND |
|
Configuration 25 [-]
| AND |
|
Configuration 26 [-]
| AND |
|
Configuration 27 [-]
| AND |
|
Configuration 28 [-]
| AND |
|
Configuration 29 [-]
| AND |
|
Configuration 30 [-]
| AND |
|
Configuration 31 [-]
| AND |
|
Configuration 32 [-]
| AND |
|
Configuration 33 [-]
| AND |
|
Configuration 34 [-]
| AND |
|
Configuration 35 [-]
| AND |
|
Configuration 36 [-]
| AND |
|
Configuration 37 [-]
| AND |
|
Configuration 38 [-]
| AND |
|
Configuration 39 [-]
| AND |
|
Configuration 40 [-]
| AND |
|
Configuration 41 [-]
| AND |
|
Configuration 42 [-]
| AND |
|
Configuration 43 [-]
| AND |
|
Configuration 44 [-]
| AND |
|
Configuration 45 [-]
| AND |
|
Configuration 46 [-]
| AND |
|
Configuration 47 [-]
| AND |
|
Configuration 48 [-]
| AND |
|
Configuration 49 [-]
| AND |
|
Configuration 50 [-]
| AND |
|
Configuration 51 [-]
| AND |
|
Configuration 52 [-]
| AND |
|
Configuration 53 [-]
| AND |
|
Configuration 54 [-]
| AND |
|
Configuration 55 [-]
| AND |
|
Configuration 56 [-]
| AND |
|
Configuration 57 [-]
| AND |
|
Configuration 58 [-]
| AND |
|
Configuration 59 [-]
| AND |
|
Configuration 60 [-]
| AND |
|
Configuration 61 [-]
| AND |
|
Configuration 62 [-]
| AND |
|
Configuration 63 [-]
| AND |
|
Configuration 64 [-]
| AND |
|
Configuration 65 [-]
| AND |
|
Configuration 66 [-]
| AND |
|
Configuration 67 [-]
| AND |
|
Configuration 68 [-]
| AND |
|
Configuration 69 [-]
| AND |
|
Configuration 70 [-]
| AND |
|
Configuration 71 [-]
| AND |
|
Configuration 72 [-]
| AND |
|
Configuration 73 [-]
| AND |
|
Configuration 74 [-]
| AND |
|
Configuration 75 [-]
| AND |
|
Configuration 76 [-]
| AND |
|
Configuration 77 [-]
| AND |
|
Configuration 78 [-]
| AND |
|
Configuration 79 [-]
| AND |
|
Configuration 80 [-]
| AND |
|
Configuration 81 [-]
| AND |
|
Configuration 82 [-]
| AND |
|
Configuration 83 [-]
| AND |
|
Configuration 84 [-]
| AND |
|
Configuration 85 [-]
| AND |
|
Configuration 86 [-]
| AND |
|
Configuration 87 [-]
| AND |
|
Configuration 88 [-]
| AND |
|
Configuration 89 [-]
| AND |
|
Configuration 90 [-]
| AND |
|
Configuration 91 [-]
| AND |
|
Configuration 92 [-]
| AND |
|
Configuration 93 [-]
| AND |
|
Configuration 94 [-]
| AND |
|
Configuration 95 [-]
| AND |
|
Configuration 96 [-]
| AND |
|
Configuration 97 [-]
| AND |
|
Configuration 98 [-]
| AND |
|
Configuration 99 [-]
| AND |
|
Configuration 100 [-]
| AND |
|
Configuration 101 [-]
| AND |
|
Configuration 102 [-]
| AND |
|
Configuration 103 [-]
| AND |
|
Configuration 104 [-]
| AND |
|
Configuration 105 [-]
| AND |
|
Configuration 106 [-]
| AND |
|
Configuration 107 [-]
| AND |
|
Configuration 108 [-]
| AND |
|
Configuration 109 [-]
| AND |
|
Configuration 110 [-]
| AND |
|
Configuration 111 [-]
| AND |
|
Configuration 112 [-]
| AND |
|
No data.
No data.
| Source | ID | Title |
|---|---|---|
EUVD |
EUVD-2023-29447 | A valid, authenticated user may be able to trigger a denial of service of the XCC web user interface or other undefined behavior through a format string injection vulnerability in a web interface API. |
Solution
Customers should update to the version (or later) of Lenovo XClarity Controller (XCC) identified in the related Lenovo Product Security Advisory: https://support.lenovo.com/us/en/product_security/LEN-99936 https://support.lenovo.com/us/en/product_security/LEN-99936
Workaround
No workaround given by the vendor.
| Link | Providers |
|---|---|
| https://support.lenovo.com/us/en/product_security/LEN-99936 |
|
Thu, 30 Jan 2025 16:15:00 +0000
| Type | Values Removed | Values Added |
|---|---|---|
| Metrics |
ssvc
|
Projects
Sign in to view the affected projects.
Status: PUBLISHED
Assigner: lenovo
Published:
Updated: 2025-01-30T15:53:03.655Z
Reserved: 2023-02-06T15:09:03.709Z
Link: CVE-2023-25492
Updated: 2024-08-02T11:25:18.567Z
Status : Modified
Published: 2023-05-01T15:15:09.290
Modified: 2024-11-21T07:49:36.720
Link: CVE-2023-25492
No data.
OpenCVE Enrichment
No data.
EUVD