Description
A privilege escalation vulnerability was discovered in XCC that could allow an authenticated XCC user with elevated privileges to execute arbitrary code via a specially crafted IPMI command.
Published: 2024-07-26
Score: 7.2 High
EPSS: < 1% Very Low
KEV: No
Impact: n/a
Action: n/a
AI Analysis

No analysis available yet.

Remediation

Vendor Solution

Update to the version (or newer) indicated for your model in the Product Impact section in the advisory: https://support.lenovo.com/us/en/product_security/LEN-156781

Tracking

Sign in to view the affected projects.

Advisories
Source ID Title
EUVD EUVD EUVD-2024-37381 A privilege escalation vulnerability was discovered in XCC that could allow an authenticated XCC user with elevated privileges to execute arbitrary code via a specially crafted IPMI command.
History

No history.

Subscriptions

No data.

cve-icon MITRE

Status: PUBLISHED

Assigner: lenovo

Published:

Updated: 2024-08-02T04:12:24.979Z

Reserved: 2024-06-18T14:42:40.470Z

Link: CVE-2024-38509

cve-icon Vulnrichment

Updated: 2024-08-02T04:12:24.979Z

cve-icon NVD

Status : Awaiting Analysis

Published: 2024-07-26T20:15:03.830

Modified: 2024-11-21T09:26:07.360

Link: CVE-2024-38509

cve-icon Redhat

No data.

cve-icon OpenCVE Enrichment

No data.

Weaknesses