A privilege escalation vulnerability was discovered in XCC that could allow an authenticated XCC user with elevated privileges to execute arbitrary code via a specially crafted IPMI command.
Fixes

Solution

Update to the version (or newer) indicated for your model in the Product Impact section in the advisory: https://support.lenovo.com/us/en/product_security/LEN-156781


Workaround

No workaround given by the vendor.

History

No history.

cve-icon MITRE

Status: PUBLISHED

Assigner: lenovo

Published:

Updated: 2024-08-02T04:12:24.979Z

Reserved: 2024-06-18T14:42:40.470Z

Link: CVE-2024-38509

cve-icon Vulnrichment

Updated: 2024-08-02T04:12:24.979Z

cve-icon NVD

Status : Awaiting Analysis

Published: 2024-07-26T20:15:03.830

Modified: 2024-11-21T09:26:07.360

Link: CVE-2024-38509

cve-icon Redhat

No data.

cve-icon OpenCVE Enrichment

No data.