Description
An authenticated XCC user can change permissions for any user through a crafted API command.
Published: 2023-10-24
Score: 7.5 High
EPSS: < 1% Very Low
KEV: No
Impact: n/a
Action: n/a
AI Analysis

No analysis available yet.

Remediation

Vendor Solution

Upgrade to the product version (or newer) indicated for your model in the advisory: https://support.lenovo.com/us/en/product_security/LEN-140960

Tracking

Sign in to view the affected projects.

Advisories
Source ID Title
EUVD EUVD EUVD-2023-54460 An authenticated XCC user can change permissions for any user through a crafted API command.
History

Tue, 03 Dec 2024 15:15:00 +0000

Type Values Removed Values Added
Metrics ssvc

{'options': {'Automatable': 'no', 'Exploitation': 'none', 'Technical Impact': 'total'}, 'version': '2.0.3'}


Subscriptions

Lenovo Thinkagile Hx1021 Edg Thinkagile Hx1021 Edg Firmware Thinkagile Hx1320 Thinkagile Hx1320 Firmware Thinkagile Hx1321 Thinkagile Hx1321 Firmware Thinkagile Hx1331 Thinkagile Hx1331 Firmware Thinkagile Hx1520-r Thinkagile Hx1520-r Firmware Thinkagile Hx1521-r Thinkagile Hx1521-r Firmware Thinkagile Hx2320-e Thinkagile Hx2320-e Firmware Thinkagile Hx2321 Thinkagile Hx2321 Firmware Thinkagile Hx2330 Thinkagile Hx2330 Firmware Thinkagile Hx2331 Thinkagile Hx2331 Firmware Thinkagile Hx2720-e Thinkagile Hx2720-e Firmware Thinkagile Hx3320 Thinkagile Hx3320 Firmware Thinkagile Hx3321 Thinkagile Hx3321 Firmware Thinkagile Hx3330 Thinkagile Hx3330 Firmware Thinkagile Hx3331 Thinkagile Hx3331 Firmware Thinkagile Hx3375 Thinkagile Hx3375 Firmware Thinkagile Hx3376 Thinkagile Hx3376 Firmware Thinkagile Hx3520-g Thinkagile Hx3520-g Firmware Thinkagile Hx3521-g Thinkagile Hx3521-g Firmware Thinkagile Hx3720 Thinkagile Hx3720 Firmware Thinkagile Hx3721 Thinkagile Hx3721 Firmware Thinkagile Hx5520 Thinkagile Hx5520-c Thinkagile Hx5520-c Firmware Thinkagile Hx5520 Firmware Thinkagile Hx5521 Thinkagile Hx5521-c Thinkagile Hx5521-c Firmware Thinkagile Hx5521 Firmware Thinkagile Hx5530 Thinkagile Hx5530 Firmware Thinkagile Hx5531 Thinkagile Hx5531 Firmware Thinkagile Hx7520 Thinkagile Hx7520 Firmware Thinkagile Hx7521 Thinkagile Hx7521 Firmware Thinkagile Hx7530 Thinkagile Hx7530 Firmware Thinkagile Hx7531 Thinkagile Hx7531 Firmware Thinkagile Hx7820 Thinkagile Hx7820 Firmware Thinkagile Hx7821 Thinkagile Hx7821 Firmware Thinkagile Hx Enclosure Thinkagile Hx Enclosure Firmware Thinkagile Mx1021 On Se350 Thinkagile Mx1021 On Se350 Firmware Thinkagile Mx3330-f All-flash Thinkagile Mx3330-f All-flash Firmware Thinkagile Mx3330-h Hybrid Thinkagile Mx3330-h Hybrid Firmware Thinkagile Mx3331-f All-flash Thinkagile Mx3331-f All-flash Firmware Thinkagile Mx3331-h Hybrid Thinkagile Mx3331-h Hybrid Firmware Thinkagile Mx3530-h Hybrid Thinkagile Mx3530-h Hybrid Firmware Thinkagile Mx3530 F All Flash Thinkagile Mx3530 F All Flash Firmware Thinkagile Mx3531-f All-flash Thinkagile Mx3531-f All-flash Firmware Thinkagile Mx3531 H Hybrid Thinkagile Mx3531 H Hybrid Firmware Thinkagile Mx630 V3 Firmware Thinkagile Mx630 V3 Intergrated System Firmware Thinkagile Mx650 V3 Firmware Thinkagile Mx650 V3 Intergrated System Firmware Thinkagile Mx Edge- Mx1020 Thinkagile Mx Edge- Mx1020 Firmware Thinkagile Vx1320 Thinkagile Vx1320 Firmware Thinkagile Vx2320 Thinkagile Vx2320 Firmware Thinkagile Vx2330 Thinkagile Vx2330 Firmware Thinkagile Vx3320 Thinkagile Vx3320 Firmware Thinkagile Vx3330 Thinkagile Vx3330 Firmware Thinkagile Vx3331 Thinkagile Vx3331 Firmware Thinkagile Vx3520-g Thinkagile Vx3520-g Firmware Thinkagile Vx3530-g Thinkagile Vx3530-g Firmware Thinkagile Vx3720 Thinkagile Vx3720 Firmware Thinkagile Vx5520 Thinkagile Vx5520 Firmware Thinkagile Vx5530 Thinkagile Vx5530 Firmware Thinkagile Vx7320 N Thinkagile Vx7320 N Firmware Thinkagile Vx7330 Thinkagile Vx7330 Firmware Thinkagile Vx7520 Thinkagile Vx7520 Firmware Thinkagile Vx7520 N Thinkagile Vx7520 N Firmware Thinkagile Vx7530 Thinkagile Vx7530 Firmware Thinkagile Vx7531 Thinkagile Vx7531 Firmware Thinkagile Vx7820 Thinkagile Vx7820 Firmware Thinkagile Vx 1se Thinkagile Vx 1se Firmware Thinkagile Vx 2u4n Thinkagile Vx 2u4n Firmware Thinkagile Vx 4u Thinkagile Vx 4u Firmware Thinkedge Se450 Thinkedge Se450 Firmware Thinkserver Sr590 Thinksystem Sd530 Thinksystem Sd530 Firmware Thinksystem Sd630 V2 Thinksystem Sd630 V2 Firmware Thinksystem Sd650-n V2 Thinksystem Sd650-n V2 Firmware Thinksystem Sd650 Dual Node Tray Thinksystem Sd650 Dual Node Tray Firmware Thinksystem Sd650 Dwc Dual Node Tray Thinksystem Sd650 Dwc Dual Node Tray Firmware Thinksystem Sd650 V2 Thinksystem Sd650 V2 Firmware Thinksystem Sd650 V3 Firmware Thinksystem Sd665 V3 Firmware Thinksystem Se350 Thinksystem Se350 Firmware Thinksystem Sn550 Thinksystem Sn550 Firmware Thinksystem Sn550 V2 Thinksystem Sn550 V2 Firmware Thinksystem Sn850 Thinksystem Sn850 Firmware Thinksystem Sr150 Thinksystem Sr150 Firmware Thinksystem Sr158 Thinksystem Sr158 Firmware Thinksystem Sr250 Thinksystem Sr250 Firmware Thinksystem Sr250 V2 Thinksystem Sr258 Thinksystem Sr258 Firmware Thinksystem Sr258 V2 Thinksystem Sr258 V2 Firmware Thinksystem Sr530 Thinksystem Sr530 Firmware Thinksystem Sr550 Thinksystem Sr550 Firmware Thinksystem Sr570 Thinksystem Sr570 Firmware Thinksystem Sr590 Firmware Thinksystem Sr630 Thinksystem Sr630 Firmware Thinksystem Sr630 V2 Thinksystem Sr630 V2 Firmware Thinksystem Sr630 V3 Firmware Thinksystem Sr635 V3 Firmware Thinksystem Sr645 Thinksystem Sr645 Firmware Thinksystem Sr645 V3 Thinksystem Sr645 V3 Firmware Thinksystem Sr650 Thinksystem Sr650 Firmware Thinksystem Sr650 V2 Thinksystem Sr650 V2 Firmware Thinksystem Sr650 V3 Firmware Thinksystem Sr655 V3 Firmware Thinksystem Sr665 Thinksystem Sr665 Firmware Thinksystem Sr665 V3 Firmware Thinksystem Sr670 Thinksystem Sr670 Firmware Thinksystem Sr670 V2 Thinksystem Sr670 V2 Firmware Thinksystem Sr675 V3 Firmware Thinksystem Sr850 Thinksystem Sr850 Firmware Thinksystem Sr850 V2 Thinksystem Sr850 V2 Firmware Thinksystem Sr850 V3 Firmware Thinksystem Sr850p Thinksystem Sr850p Firmware Thinksystem Sr860 Thinksystem Sr860 Firmware Thinksystem Sr860 V2 Thinksystem Sr860 V2 Firmware Thinksystem Sr860 V3 Firmware Thinksystem Sr950 Thinksystem Sr950 Firmware Thinksystem St250 Thinksystem St250 Firmware Thinksystem St250 V2 Thinksystem St250 V2 Firmware Thinksystem St258 Thinksystem St258 Firmware Thinksystem St258 V2 Thinksystem St258 V2 Firmware Thinksystem St550 Thinksystem St550 Firmware Thinksystem St650 V2 Thinksystem St650 V2 Firmware Thinksystem St650 V3 Firmware Thinksystem St658 V2 Thinksystem St658 V2 Firmware Thinksystem St658 V3 Firmware
cve-icon MITRE

Status: PUBLISHED

Assigner: lenovo

Published:

Updated: 2024-12-03T14:39:50.517Z

Reserved: 2023-08-29T15:54:55.201Z

Link: CVE-2023-4607

cve-icon Vulnrichment

Updated: 2024-08-02T07:31:06.682Z

cve-icon NVD

Status : Modified

Published: 2023-10-25T18:17:41.560

Modified: 2024-11-21T08:35:32.027

Link: CVE-2023-4607

cve-icon Redhat

No data.

cve-icon OpenCVE Enrichment

No data.

Weaknesses