Skip to content
CVE PROGRAM SOURCE RECORD7.2 High

CVE-2024-8278

A privilege escalation vulnerability was discovered in XCC that could allow a valid, authenticated XCC user with elevated privileges to perform command injection via specially craf

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
lenovo

Description

A privilege escalation vulnerability was discovered in XCC that could allow a valid, authenticated XCC user with elevated privileges to perform command injection via specially crafted IPMI commands.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Lenovo HX5530 Appliance (ThinkAgile) XCC

Default version status: unaffected

  • 0 to < 4.71 AFBT48Caffected

Lenovo HX7530 Appliance (ThinkAgile) XCC

Default version status: unaffected

  • 0 to < 4.71 AFBT48Caffected

Lenovo ST250 V3 (ThinkSystem) XCC

Default version status: unaffected

  • 0 to < 2.10 CTX312Gaffected

Lenovo VX3331 Certified Node (ThinkAgile) XCC

Default version status: unaffected

  • 0 to < 4.71 AFBT48Caffected

Lenovo HX Enclosure Certified Node (ThinkAgile) XCC

Default version status: unaffected

  • 0 to < 6.36 TEI3F4Aaffected

Lenovo HX1021 Edge Certified Node 3yr (ThinkAgile) XCC

Default version status: unaffected

  • 0 to < 4.11 TEI3E4Aaffected

Lenovo HX1320 Appliance (ThinkAgile) XCC

Default version status: unaffected

  • 0 to < 9.97 CDI3B4Baffected

Lenovo HX1321 Certified Node (ThinkAgile) XCC

Default version status: unaffected

  • 0 to < 9.97 CDI3B4Baffected

Lenovo HX1331 Certified Node (ThinkAgile) XCC

Default version status: unaffected

  • 0 to < 4.71 AFBT48Caffected

Lenovo HX1520-R Appliance (ThinkAgile) XCC

Default version status: unaffected

  • 0 to < 9.97 CDI3B4Baffected

Lenovo HX1521-R Certified Node (ThinkAgile) XCC

Default version status: unaffected

  • 0 to < 9.97 CDI3B4Baffected

Lenovo HX2320-E Appliance (ThinkAgile) XCC

Default version status: unaffected

  • 0 to < 9.97 CDI3B4Baffected

Lenovo HX2321 Certified Node (ThinkAgile) XCC

Default version status: unaffected

  • 0 to < 9.97 CDI3B4Baffected

Lenovo HX2330 Appliance (ThinkAgile) XCC

Default version status: unaffected

  • 0 to < 4.71 AFBT48Caffected

Lenovo HX2331 Certified Node (ThinkAgile) XCC

Default version status: unaffected

  • 0 to < 4.71 AFBT48Caffected

Lenovo HX2720-E Appliance (ThinkAgile) XCC

Default version status: unaffected

  • 0 to < 6.36 TEI3F4Aaffected

Lenovo HX3320 Appliance (ThinkAgile) XCC

Default version status: unaffected

  • 0 to < 9.97 CDI3B4Baffected

Lenovo HX3321 Certified Node (ThinkAgile) XCC

Default version status: unaffected

  • 0 to < 9.97 CDI3B4Baffected

Lenovo HX3330 Appliance (ThinkAgile) XCC

Default version status: unaffected

  • 0 to < 4.71 AFBT48Caffected

Lenovo HX3331 Certified Node (ThinkAgile) XCC

Default version status: unaffected

  • 0 to < 4.71 AFBT48Caffected

Lenovo HX3331 Node SAP HANA (ThinkAgile) XCC

Default version status: unaffected

  • 0 to < 4.71 AFBT48Caffected

Lenovo HX3375 Appliance (ThinkAgile) XCC

Default version status: unaffected

  • 0 to < 5.61 D8BT64Daffected

Lenovo HX3376 Certified Node (ThinkAgile) XCC

Default version status: unaffected

  • 0 to < 5.61 D8BT64Daffected

Lenovo HX3520-G Appliance (ThinkAgile) XCC

Default version status: unaffected

  • 0 to < 9.97 CDI3B4Baffected

Lenovo HX3521-G Certified Node (ThinkAgile) XCC

Default version status: unaffected

  • 0 to < 9.97 CDI3B4Baffected

Lenovo HX3720 Appliance (ThinkAgile) XCC

Default version status: unaffected

  • 0 to < 6.36 TEI3F4Aaffected

Lenovo HX3721 Certified Node (ThinkAgile) XCC

Default version status: unaffected

  • 0 to < 6.36 TEI3F4Aaffected

Lenovo HX5520 Appliance (ThinkAgile) XCC

Default version status: unaffected

  • 0 to < 9.97 CDI3B4Baffected

Lenovo HX5520-C Appliance (ThinkAgile) XCC

Default version status: unaffected

  • 0 to < 9.97 CDI3B4Baffected

Lenovo HX5521 Certified Node (ThinkAgile) XCC

Default version status: unaffected

  • 0 to < 9.97 CDI3B4Baffected

Lenovo HX5521-C Certified Node (ThinkAgile) XCC

Default version status: unaffected

  • 0 to < 9.97 CDI3B4Baffected

Lenovo HX5531 Certified Node (ThinkAgile) XCC

Default version status: unaffected

  • 0 to < 4.71 AFBT48Caffected

Lenovo HX7520 Appliance (ThinkAgile) XCC

Default version status: unaffected

  • 0 to < 9.97 CDI3B4Baffected

Lenovo HX7521 Certified Node (ThinkAgile) XCC

Default version status: unaffected

  • 0 to < 9.97 CDI3B4Baffected

Lenovo HX7530 Appl for SAP HANA (ThinkAgile) XCC

Default version status: unaffected

  • 0 to < 4.71 AFBT48Caffected

Lenovo HX7531 Certified Node (ThinkAgile) XCC

Default version status: unaffected

  • 0 to < 4.71 AFBT48Caffected

Lenovo HX7531 Node SAP HANA (ThinkAgile) XCC

Default version status: unaffected

  • 0 to < 4.71 AFBT48Caffected

Lenovo HX7820 Appliance (ThinkAgile) XCC

Default version status: unaffected

  • 0 to < 3.11 PSI354Aaffected

Lenovo HX7821 Certified Node (ThinkAgile) XCC

Default version status: unaffected

  • 0 to < 3.11 PSI354Aaffected

Lenovo MX Edge Appliance - MX1020 (ThinkAgile) XCC

Default version status: unaffected

  • 0 to < 4.11 TEI3E4Aaffected

Lenovo MX3330-F All-flash Appliance (ThinkAgile) XCC

Default version status: unaffected

  • 0 to < 4.71 AFBT48Caffected

Lenovo MX3330-H Hybrid Appliance (ThinkAgile) XCC

Default version status: unaffected

  • 0 to < 4.71 AFBT48Caffected

Lenovo MX3331-F All-flash Certified node (ThinkAgile) XCC

Default version status: unaffected

  • 0 to < 4.71 AFBT48Caffected

Lenovo MX3331-H Hybrid Certified node (ThinkAgile) XCC

Default version status: unaffected

  • 0 to < 4.71 AFBT48Caffected

Lenovo MX3530 F All flash Appliance (ThinkAgile) XCC

Default version status: unaffected

  • 0 to < 4.71 AFBT48Caffected

Lenovo MX3530-H Hybrid Appliance (ThinkAgile) XCC

Default version status: unaffected

  • 0 to < 4.71 AFBT48Caffected

Lenovo MX3531 H Hybrid Certified node (ThinkAgile) XCC

Default version status: unaffected

  • 0 to < 4.71 AFBT48Caffected

Lenovo MX3531-F All-flash Certified node (ThinkAgile) XCC

Default version status: unaffected

  • 0 to < 4.71 AFBT48Caffected

Lenovo P920 Rack Workstation (ThinkStation) XCC

Default version status: unaffected

  • 0 to < 9.97 CDI3B4Baffected

Lenovo SD530 (ThinkSystem) XCC

Default version status: unaffected

  • 0 to < 6.36 TEI3F4Aaffected

Lenovo SD530 V3 (ThinkSystem) XCC

Default version status: unaffected

  • 0 to < 1.20 USX352affected

Lenovo SD550 V3 (ThinkSystem) XCC

Default version status: unaffected

  • 0 to < 1.20 USX352affected

Lenovo SD630 V2 (ThinkSystem) XCC

Default version status: unaffected

  • 0 to < 4.11 TGBT50Caffected

Lenovo SD650 DWC Dual Node Tray (ThinkSystem) XCC

Default version status: unaffected

  • 0 to < 6.36 TEI3F4Aaffected

Lenovo SD650 V2 (ThinkSystem) XCC

Default version status: unaffected

  • 0 to < 4.11 TGBT50Caffected

Lenovo SD650 V3 (ThinkSystem) XCC

Default version status: unaffected

  • 0 to < 6.10 USX350Gaffected

Lenovo SD650-N V2 (ThinkSystem) XCC

Default version status: unaffected

  • 0 to < 4.11 TGBT50Caffected

Lenovo SD665 V3 (ThinkSystem) XCC

Default version status: unaffected

  • 0 to < 6.10 QGX340Jaffected

Lenovo SE350 (ThinkSystem) XCC

Default version status: unaffected

  • 0 to < 4.11 TEI3E4Aaffected

Lenovo SE350 V2 (ThinkEdge) XCC

Default version status: unaffected

  • 0 to < 3.11 IYX328Maffected

Lenovo SE360 V2 (ThinkEdge) XCC

Default version status: unaffected

  • 0 to < 3.11 IYX328Maffected

Lenovo SE450 (ThinkEdge) XCC

Default version status: unaffected

  • 0 to < 3.11 USX332Xaffected

Lenovo SE455 V3 (ThinkEdge) XCC

Default version status: unaffected

  • 0 to < 3.10 MBX308Laffected

Lenovo SN550 (ThinkSystem) XCC

Default version status: unaffected

  • 0 to < 6.36 TEI3F4Aaffected

Lenovo SN550 V2 (ThinkSystem) XCC

Default version status: unaffected

  • 0 to < 4.11 TGBT50Caffected

Lenovo SN850 (ThinkSystem) XCC

Default version status: unaffected

  • 0 to < 6.36 TEI3F4Aaffected

Lenovo SR150 (ThinkSystem) XCC

Default version status: unaffected

  • 0 to < 6.36 TEI3F4Aaffected

Lenovo SR158 (ThinkSystem) XCC

Default version status: unaffected

  • 0 to < 6.36 TEI3F4Aaffected

Lenovo SR250 (ThinkSystem) XCC

Default version status: unaffected

  • 0 to < 6.36 TEI3F4Aaffected

Lenovo SR250 V2 (ThinkSystem) XCC

Default version status: unaffected

  • 0 to < 4.11 TGBT50Caffected

Lenovo SR250 V3 (ThinkSystem) XCC

Default version status: unaffected

  • 0 to < 2.10 CTX312Gaffected

Lenovo SR258 (ThinkSystem) XCC

Default version status: unaffected

  • 0 to < 6.36 TEI3F4Aaffected

Lenovo SR258 V2 (ThinkSystem) XCC

Default version status: unaffected

  • 0 to < 4.11 TGBT50Caffected

Lenovo SR258 V3 (ThinkSystem) XCC

Default version status: unaffected

  • 0 to < 2.10 CTX312Gaffected

Lenovo SR530 (ThinkSystem) XCC

Default version status: unaffected

  • 0 to < 9.97 CDI3B4Baffected

Lenovo SR550 (ThinkSystem) XCC

Default version status: unaffected

  • 0 to < 9.97 CDI3B4Baffected

Lenovo SR570 (ThinkSystem) XCC

Default version status: unaffected

  • 0 to < 9.97 CDI3B4Baffected

Lenovo SR590 (ThinkSystem) XCC

Default version status: unaffected

  • 0 to < 9.97 CDI3B4Baffected

Lenovo SR630 (ThinkSystem) XCC

Default version status: unaffected

  • 0 to < 9.97 CDI3B4Baffected

Lenovo SR630 V2 (ThinkSystem) XCC

Default version status: unaffected

  • 0 to < 4.71 AFBT48Caffected

Lenovo SR630 V3 (ThinkSystem) XCC

Default version status: unaffected

  • 0 to < 5.10 ESX330Maffected

Lenovo SR635 V3 (ThinkSystem) XCC

Default version status: unaffected

  • 0 to < 3.20 KAX334Oaffected

Lenovo SR645 (ThinkSystem) XCC

Default version status: unaffected

  • 0 to < 5.61 D8BT64Daffected

Lenovo SR645 V3 (ThinkSystem) XCC

Default version status: unaffected

  • 0 to < 3.20 KAX334Oaffected

Lenovo SR650 (ThinkSystem) XCC

Default version status: unaffected

  • 0 to < 9.97 CDI3B4Baffected

Lenovo SR650 V2 (ThinkSystem) XCC

Default version status: unaffected

  • 0 to < 4.71 AFBT48Caffected

Lenovo SR650 V3 (ThinkSystem) XCC

Default version status: unaffected

  • 0 to < 5.10 ESX330Maffected

Lenovo SR655 V3 (ThinkSystem) XCC

Default version status: unaffected

  • 0 to < 3.20 KAX334Oaffected

Lenovo SR665 (ThinkSystem) XCC

Default version status: unaffected

  • 0 to < 5.61 D8BT64Daffected

Lenovo SR665 V3 (ThinkSystem) XCC

Default version status: unaffected

  • 0 to < 3.20 KAX334Oaffected

Lenovo SR670 (ThinkSystem) XCC

Default version status: unaffected

  • 0 to < 4.11 TEI3E4Aaffected

Lenovo SR670 V2 (ThinkSystem) XCC

Default version status: unaffected

  • 0 to < 4.11 TGBT50Caffected

Lenovo SR675 V3 (ThinkSystem) XCC

Default version status: unaffected

  • 0 to < 6.10 QGX340Jaffected

Lenovo SR850 (ThinkSystem) XCC

Default version status: unaffected

  • 0 to < 6.36 TEI3F4Aaffected

Lenovo SR850 V2 (ThinkSystem) XCC

Default version status: unaffected

  • 0 to < 4.11 TGBT50Caffected

Lenovo SR850 V3 (ThinkSystem) XCC

Default version status: unaffected

  • 0 to < 4.10 RSX312Iaffected

Lenovo SR850P (ThinkSystem) XCC

Default version status: unaffected

  • 0 to < 4.11 TEI3E4Aaffected

Lenovo SR860 (ThinkSystem) XCC

Default version status: unaffected

  • 0 to < 6.36 TEI3F4Aaffected

Lenovo SR860 V2 (ThinkSystem) XCC

Default version status: unaffected

  • 0 to < 4.11 TGBT50Caffected

Lenovo SR860 V3 (ThinkSystem) XCC

Default version status: unaffected

  • 0 to < 4.10 RSX312Iaffected

Lenovo SR950 (ThinkSystem) XCC

Default version status: unaffected

  • 0 to < 3.11 PSI354Aaffected

Lenovo SR950 V3 (ThinkSystem) XCC

Default version status: unaffected

  • 0 to < 3.10 EBX308Iaffected

Lenovo ST250 (ThinkSystem) XCC

Default version status: unaffected

  • 0 to < 6.36 TEI3F4Aaffected

Lenovo ST250 V2 (ThinkSystem) XCC

Default version status: unaffected

  • 0 to < 4.11 TGBT50Caffected

Lenovo ST258 (ThinkSystem) XCC

Default version status: unaffected

  • 0 to < 6.36 TEI3F4Aaffected

Lenovo ST258 V2 (ThinkSystem) XCC

Default version status: unaffected

  • 0 to < 4.11 TGBT50Caffected

Lenovo ST258 V3 (ThinkSystem) XCC

Default version status: unaffected

  • 0 to < 2.10 CTX312Gaffected

Lenovo ST550 (ThinkSystem) XCC

Default version status: unaffected

  • 0 to < 9.97 CDI3B4Baffected

Lenovo ST650 V2 (ThinkSystem) XCC

Default version status: unaffected

  • 0 to < 4.11 TGBT50Caffected

Lenovo ST650 V3 (ThinkSystem) XCC

Default version status: unaffected

  • 0 to < 6.10 USX350Gaffected

Lenovo ST658 V2 (ThinkSystem) XCC

Default version status: unaffected

  • 0 to < 4.11 TGBT50Caffected

Lenovo ST658 V3 (ThinkSystem) XCC

Default version status: unaffected

  • 0 to < 6.10 USX350Gaffected

Lenovo ThinkAgile MX1021 on SE350 XCC

Default version status: unaffected

  • 0 to < 4.11 TEI3E4Aaffected

Lenovo VX 1SE Certified Node (ThinkAgile) XCC

Default version status: unaffected

  • 0 to < 6.36 TEI3F4Aaffected

Lenovo VX 2U4N Certified Node (ThinkAgile) XCC

Default version status: unaffected

  • 0 to < 6.36 TEI3F4Aaffected

Lenovo VX 4U Certified Node (ThinkAgile) XCC

Default version status: unaffected

  • 0 to < 3.11 PSI354Aaffected

Lenovo VX1320 (ThinkAgile) XCC

Default version status: unaffected

  • 0 to < 6.36 TEI3F4Aaffected

Lenovo VX2320 (ThinkAgile) XCC

Default version status: unaffected

  • 0 to < 9.97 CDI3B4Baffected

Lenovo VX2330 Appliance (ThinkAgile) XCC

Default version status: unaffected

  • 0 to < 4.71 AFBT48Caffected

Lenovo VX3320 (ThinkAgile) XCC

Default version status: unaffected

  • 0 to < 9.97 CDI3B4Baffected

Lenovo VX3330 Appliance (ThinkAgile) XCC

Default version status: unaffected

  • 0 to < 4.71 AFBT48Caffected

Lenovo VX3520-G (ThinkAgile) XCC

Default version status: unaffected

  • 0 to < 9.97 CDI3B4Baffected

Lenovo VX3530-G Appliance (ThinkAgile) XCC

Default version status: unaffected

  • 0 to < 4.71 AFBT48Caffected

Lenovo VX3720 (ThinkAgile) XCC

Default version status: unaffected

  • 0 to < 6.36 TEI3F4Aaffected

Lenovo VX5520 (ThinkAgile) XCC

Default version status: unaffected

  • 0 to < 9.97 CDI3B4Baffected

Lenovo VX5530 Appliance (ThinkAgile) XCC

Default version status: unaffected

  • 0 to < 4.71 AFBT48Caffected

Lenovo VX635 V3 Integrated System (ThinkAgile) XCC

Default version status: unaffected

  • 0 to < 3.20 KAX334Oaffected

Lenovo VX645 V3 Certified Node (ThinkAgile) XCC

Default version status: unaffected

  • 0 to < 3.20 KAX334Oaffected

Lenovo VX645 V3 Integrated System (ThinkAgile) XCC

Default version status: unaffected

  • 0 to < 3.20 KAX334Oaffected

Lenovo VX655 V3 Certified Node (ThinkAgile) XCC

Default version status: unaffected

  • 0 to < 3.20 KAX334Oaffected

Lenovo VX655 V3 Integrated System (ThinkAgile) XCC

Default version status: unaffected

  • 0 to < 3.20 KAX334Oaffected

Lenovo VX665 V3 Certified Node (ThinkAgile) XCC

Default version status: unaffected

  • 0 to < 3.20 KAX334Oaffected

Lenovo VX665 V3 Integrated System (ThinkAgile) XCC

Default version status: unaffected

  • 0 to < 3.20 KAX334Oaffected

Lenovo VX7320 N (ThinkAgile) XCC

Default version status: unaffected

  • 0 to < 9.97 CDI3B4Baffected

Lenovo VX7330 Appliance (Thinkagile) XCC

Default version status: unaffected

  • 0 to < 4.71 AFBT48Caffected

Lenovo VX7520 (ThinkAgile) XCC

Default version status: unaffected

  • 0 to < 9.97 CDI3B4Baffected

Lenovo VX7520 N (ThinkAgile) XCC

Default version status: unaffected

  • 0 to < 9.97 CDI3B4Baffected

Lenovo VX7530 Appliance (ThinkAgile) XCC

Default version status: unaffected

  • 0 to < 4.71 AFBT48Caffected

Lenovo VX7531 Certified Node (ThinkAgile) XCC

Default version status: unaffected

  • 0 to < 4.71 AFBT48Caffected

Lenovo VX7820 (ThinkAgile) XCC

Default version status: unaffected

  • 0 to < 3.11 PSI354Aaffected

References