7.2
High
CVE-2024-38511 A privilege escalation vulnerability was discovered in an upload processing functionality of XCC that could allow an…
Description
A privilege escalation vulnerability was discovered in an upload processing functionality of XCC that could allow an authenticated XCC user with elevated privileges to perform command injection via specially crafted file uploads.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| XClarity Controller | Versions not published | |
| thinkagile_hx3321_firmware 9.97 | earliest → < 9.97 | 9.97 |
| thinkagile_hx5530_firmware 4.71 | earliest → < 4.71 | 4.71 |
| thinkagile_hx7530_firmware 4.71 | earliest → < 4.71 | 4.71 |
| thinkagile_vx3331_firmware 4.71 | earliest → < 4.71 | 4.71 |
| thinkagile_hx_enclosure_certified_node_firmware 4.11 | earliest → < 4.11 | 4.11 |
| thinkagile_hx1021_edg_firmware 4.11 | earliest → < 4.11 | 4.11 |
| thinkagile_hx1320_firmware 9.97 | earliest → < 9.97 | 9.97 |
| thinkagile_hx1331_firmware 4.71 | earliest → < 4.71 | 4.71 |
Show the 107 other branches Hide the 107 other branches
| Product | Affected versions | Fixed in |
|---|---|---|
| thinkagile_hx1321_firmware 9.97 | earliest → < 9.97 | 9.97 |
| thinkagile_hx1520-r_firmware 9.97 | earliest → < 9.97 | 9.97 |
| thinkagile_hx1521-r_firmware 9.97 | earliest → < 9.97 | 9.97 |
| thinkagile_hx2320-e_firmware 9.97 | earliest → < 9.97 | 9.97 |
| thinkagile_hx2321_firmware 9.97 | earliest → < 9.97 | 9.97 |
| thinkagile_hx2330_firmware 4.71 | earliest → < 4.71 | 4.71 |
| thinkagile_hx2331_firmware 4.71 | earliest → < 4.71 | 4.71 |
| thinkagile_hx2720-e_firmware 4.11 | earliest → < 4.11 | 4.11 |
| thinkagile_hx3320_firmware 9.97 | earliest → < 9.97 | 9.97 |
| thinkagile_hx3330_firmware 4.71 | earliest → < 4.71 | 4.71 |
| thinkagile_hx3331 4.71 | earliest → < 4.71 | 4.71 |
| thinkagile_hx3375_firmware 5.61 | earliest → < 5.61 | 5.61 |
| thinkagile_hx3376_firmware 5.61 | earliest → < 5.61 | 5.61 |
| thinkagile_hx3520-g_firmware 9.97 | earliest → < 9.97 | 9.97 |
| thinkagile_hx3521-g_firmware 9.97 | earliest → < 9.97 | 9.97 |
| thinkagile_hx3720_firmware 4.11 | earliest → < 4.11 | 4.11 |
| thinkagile_hx3721_firmware 4.11 | earliest → < 4.11 | 4.11 |
| thinkagile_hx5520-c_firmware 9.97 | earliest → < 9.97 | 9.97 |
| thinkagile_hx5521-c_firmware 9.97 | earliest → < 9.97 | 9.97 |
| thinkagile_hx5531_firmware 4.71 | earliest → < 4.71 | 4.71 |
| thinkagile_hx7520_firmware 9.97 | earliest → < 9.97 | 9.97 |
| thinkagile_hx7521_firmware 9.97 | earliest → < 9.97 | 9.97 |
| thinkagile_hx7531_firmware 4.71 | earliest → < 4.71 | 4.71 |
| thinkagile_hx7820_firmware 3.11 | earliest → < 3.11 | 3.11 |
| thinkagile_hx7821_firmware 3.11 | earliest → < 3.11 | 3.11 |
| thinkagile_mx1020_firmware 4.11 | earliest → < 4.11 | 4.11 |
| thinkagile_mx3330-f_firmware 4.71 | earliest → < 4.71 | 4.71 |
| thinkagile_mx3330-h_firmware 4.71 | earliest → < 4.71 | 4.71 |
| thinkagile_mx3331-f_firmware 4.71 | earliest → < 4.71 | 4.71 |
| thinkagile_mx3331-h_firmware 4.71 | earliest → < 4.71 | 4.71 |
| thinkagile_mx3530_f_firmware 4.71 | earliest → < 4.71 | 4.71 |
| thinkagile_mx3530-h_firmware 4.71 | earliest → < 4.71 | 4.71 |
| thinkagile_mx3531-f_firmware 4.71 | earliest → < 4.71 | 4.71 |
| thinkagile_vx1320_firmware 4.11 | earliest → < 4.11 | 4.11 |
| thinkagile_vx2320_firmware 9.97 | earliest → < 9.97 | 9.97 |
| thinkagile_vx2330_firmware 4.71 | earliest → < 4.71 | 4.71 |
| thinkagile_vx3320_firmware 9.97 | earliest → < 9.97 | 9.97 |
| thinkagile_vx3330_firmware 4.71 | earliest → < 4.71 | 4.71 |
| thinkagile_vx3520-g_firmware 9.97 | earliest → < 9.97 | 9.97 |
| thinkagile_vx3530-g_firmware 4.71 | earliest → < 4.71 | 4.71 |
| thinkagile_vx3720_firmware 4.11 | earliest → < 4.11 | 4.11 |
| thinkagile_vx5520_firmware 9.97 | earliest → < 9.97 | 9.97 |
| thinkagile_vx5530_firmware 4.71 | earliest → < 4.71 | 4.71 |
| thinkagile_vx7320_n_firmware 9.97 | earliest → < 9.97 | 9.97 |
| thinkagile_vx7330_firmware 4.71 | earliest → < 4.71 | 4.71 |
| thinkagile_vx7520_firmware 9.97 | earliest → < 9.97 | 9.97 |
| thinkagile_vx7520_n_firmware 9.97 | earliest → < 9.97 | 9.97 |
| thinkagile_vx7530_firmware 4.71 | earliest → < 4.71 | 4.71 |
| thinkagile_vx7531_firmware 4.71 | earliest → < 4.71 | 4.71 |
| thinkagile_vx7820_firmware 3.11 | earliest → < 3.11 | 3.11 |
| thinkstation_p920_workstation_firmware 9.97 | earliest → < 9.97 | 9.97 |
| thinksystem_st250_firmware 4.11 | earliest → < 4.11 | 4.11 |
| thinksystem_sd530_firmware 4.11 | earliest → < 4.11 | 4.11 |
| thinksystem_sd630_v2_firmware 4.11 | earliest → < 4.11 | 4.11 |
| thinksystem_sd650_dual_node_tray_firmware 6.36 | earliest → < 6.36 | 6.36 |
| thinksystem_sd650_dual_node_tray_firmware 4.11 | earliest → < 4.11 | 4.11 |
| thinksystem_sd650-n_v2_firmware 4.11 | earliest → < 4.11 | 4.11 |
| thinksystem_sd650_v3_firmware 4.11 | earliest → < 4.11 | 4.11 |
| thinksystem_sd665_v3_firmware 5.11 | earliest → < 5.11 | 5.11 |
| thinksystem_se350_firmware 4.11 | earliest → < 4.11 | 4.11 |
| thinksystem_sn550_firmware 6.36 | earliest → < 6.36 | 6.36 |
| thinksystem_sn550_firmware 4.11 | earliest → < 4.11 | 4.11 |
| thinksystem_sn550_v2_firmware 4.11 | earliest → < 4.11 | 4.11 |
| thinksystem_sn850_firmware 6.36 | earliest → < 6.36 | 6.36 |
| thinksystem_sn850_firmware 4.11 | earliest → < 4.11 | 4.11 |
| thinksystem_sr150_firmware 4.11 | earliest → < 4.11 | 4.11 |
| thinksystem_sr158_firmware 4.11 | earliest → < 4.11 | 4.11 |
| thinksystem_sr250_firmware 4.11 | earliest → < 4.11 | 4.11 |
| thinksystem_sr250_v2_firmware 4.11 | earliest → < 4.11 | 4.11 |
| thinksystem_sr258_firmware 4.11 | earliest → < 4.11 | 4.11 |
| thinksystem_sr258_v2_firmware 4.11 | earliest → < 4.11 | 4.11 |
| thinksystem_sr530_firmware 9.97 | earliest → < 9.97 | 9.97 |
| thinksystem_sr550_firmware 9.97 | earliest → < 9.97 | 9.97 |
| thinksystem_sr570_firmware 9.97 | earliest → < 9.97 | 9.97 |
| thinksystem_sr590_firmware 9.97 | earliest → < 9.97 | 9.97 |
| thinksystem_sr630_firmware 9.97 | earliest → < 9.97 | 9.97 |
| thinksystem_sr630_v2_firmware 4.71 | earliest → < 4.71 | 4.71 |
| thinksystem_sr630_v3_firmware 4.51 | earliest → < 4.51 | 4.51 |
| thinksystem_sr635_firmware 2.81 | earliest → < 2.81 | 2.81 |
| thinksystem_sr645_firmware 5.61 | earliest → < 5.61 | 5.61 |
| thinksystem_sr645_v3_firmware 2.81 | earliest → < 2.81 | 2.81 |
| thinksystem_sr650_firmware 9.97 | earliest → < 9.97 | 9.97 |
| thinksystem_sr650_v2_firmware 4.71 | earliest → < 4.71 | 4.71 |
| thinksystem_sr655_v3_firmware 2.81 | earliest → < 2.81 | 2.81 |
| thinksystem_sr665_firmware 5.61 | earliest → < 5.61 | 5.61 |
| thinksystem_sr665_v3_firmware 5.61 | earliest → < 5.61 | 5.61 |
| thinksystem_sr665_v3_firmware 2.81 | earliest → < 2.81 | 2.81 |
| thinksystem_sr670_firmware 4.11 | earliest → < 4.11 | 4.11 |
| thinksystem_sr670_v2_firmware 5.11 | earliest → < 5.11 | 5.11 |
| thinksystem_sr675_v3_firmware 5.11 | earliest → < 5.11 | 5.11 |
| thinksystem_sr850_firmware 6.36 | earliest → < 6.36 | 6.36 |
| thinksystem_sr850_firmware 4.11 | earliest → < 4.11 | 4.11 |
| thinksystem_sr850_v2_firmware 4.11 | earliest → < 4.11 | 4.11 |
| thinksystem_sr850_v3_firmware 1.20 | earliest → < 1.20 | 1.20 |
| thinksystem_sr850p_firmware 6.36 | earliest → < 6.36 | 6.36 |
| thinksystem_sr860_firmware 4.11 | earliest → < 4.11 | 4.11 |
| thinksystem_sr860_v2_firmware 4.11 | earliest → < 4.11 | 4.11 |
| thinksystem_sr860_v3_firmware 1.20 | earliest → < 1.20 | 1.20 |
| thinksystem_sr950_firmware 3.11 | earliest → < 3.11 | 3.11 |
| thinksystem_st250_v2_firmware 4.11 | earliest → < 4.11 | 4.11 |
| thinksystem_st258_firmware 4.11 | earliest → < 4.11 | 4.11 |
| thinksystem_st258_v2_firmware 4.11 | earliest → < 4.11 | 4.11 |
| thinksystem_st550_firmware 9.97 | earliest → < 9.97 | 9.97 |
| thinksystem_st650_v2_firmware 4.11 | earliest → < 4.11 | 4.11 |
| thinksystem_st650_v3_firmware 4.11 | earliest → < 4.11 | 4.11 |
| thinksystem_st658_v2_firmware 4.11 | earliest → < 4.11 | 4.11 |
| thinksystem_st658_v3_firmware 4.11 | earliest → < 4.11 | 4.11 |
Other CVEs of XClarity Controller
The 11 CVEs of XClarity Controller →
CVE-2024-38512
A privilege escalation vulnerability was discovered in XCC that could allow an authenticated XCC user with elevated…
7.2
High
CVE-2024-38510
A privilege escalation vulnerability was discovered in the SSH captive command shell interface that could allow an…
7.2
High
CVE-2024-38509
A privilege escalation vulnerability was discovered in XCC that could allow an authenticated XCC user with elevated…
7.2
High
CVE-2024-38508
A privilege escalation vulnerability was discovered in the web interface or SSH captive command shell interface of XCC…
7.2
High