Skip to content
Sign in
7.2 High

CVE-2024-8278 A privilege escalation vulnerability was discovered in XCC that could allow a valid, authenticated XCC user with…

Description

A privilege escalation vulnerability was discovered in XCC that could allow a valid, authenticated XCC user with elevated privileges to perform command injection via specially crafted IPMI commands.

Affected products and versions

Product Affected versions Fixed in
HX5530 Appliance (ThinkAgile) XCC Versions not published
HX7530 Appliance (ThinkAgile) XCC Versions not published
ST250 V3 (ThinkSystem) XCC Versions not published
VX3331 Certified Node (ThinkAgile) XCC Versions not published
HX Enclosure Certified Node (ThinkAgile) XCC Versions not published
HX1021 Edge Certified Node 3yr (ThinkAgile) XCC Versions not published
HX1320 Appliance (ThinkAgile) XCC Versions not published
HX1321 Certified Node (ThinkAgile) XCC Versions not published
HX1331 Certified Node (ThinkAgile) XCC Versions not published
Show the 149 other branches
Product Affected versions Fixed in
HX1520-R Appliance (ThinkAgile) XCC Versions not published
HX1521-R Certified Node (ThinkAgile) XCC Versions not published
HX2320-E Appliance (ThinkAgile) XCC Versions not published
HX2321 Certified Node (ThinkAgile) XCC Versions not published
HX2330 Appliance (ThinkAgile) XCC Versions not published
HX2331 Certified Node (ThinkAgile) XCC Versions not published
HX2720-E Appliance (ThinkAgile) XCC Versions not published
HX3320 Appliance (ThinkAgile) XCC Versions not published
HX3321 Certified Node (ThinkAgile) XCC Versions not published
HX3330 Appliance (ThinkAgile) XCC Versions not published
HX3331 Certified Node (ThinkAgile) XCC Versions not published
HX3331 Node SAP HANA (ThinkAgile) XCC Versions not published
HX3375 Appliance (ThinkAgile) XCC Versions not published
HX3376 Certified Node (ThinkAgile) XCC Versions not published
HX3520-G Appliance (ThinkAgile) XCC Versions not published
HX3521-G Certified Node (ThinkAgile) XCC Versions not published
HX3720 Appliance (ThinkAgile) XCC Versions not published
HX3721 Certified Node (ThinkAgile) XCC Versions not published
HX5520 Appliance (ThinkAgile) XCC Versions not published
HX5520-C Appliance (ThinkAgile) XCC Versions not published
HX5521 Certified Node (ThinkAgile) XCC Versions not published
HX5521-C Certified Node (ThinkAgile) XCC Versions not published
HX5531 Certified Node (ThinkAgile) XCC Versions not published
HX7520 Appliance (ThinkAgile) XCC Versions not published
HX7521 Certified Node (ThinkAgile) XCC Versions not published
HX7530 Appl for SAP HANA (ThinkAgile) XCC Versions not published
HX7531 Certified Node (ThinkAgile) XCC Versions not published
HX7531 Node SAP HANA (ThinkAgile) XCC Versions not published
HX7820 Appliance (ThinkAgile) XCC Versions not published
HX7821 Certified Node (ThinkAgile) XCC Versions not published
MX Edge Appliance - MX1020 (ThinkAgile) XCC Versions not published
MX3330-F All-flash Appliance (ThinkAgile) XCC Versions not published
MX3330-H Hybrid Appliance (ThinkAgile) XCC Versions not published
MX3331-F All-flash Certified node (ThinkAgile) XCC Versions not published
MX3331-H Hybrid Certified node (ThinkAgile) XCC Versions not published
MX3530 F All flash Appliance (ThinkAgile) XCC Versions not published
MX3530-H Hybrid Appliance (ThinkAgile) XCC Versions not published
MX3531 H Hybrid Certified node (ThinkAgile) XCC Versions not published
MX3531-F All-flash Certified node (ThinkAgile) XCC Versions not published
P920 Rack Workstation (ThinkStation) XCC Versions not published
SD530 (ThinkSystem) XCC Versions not published
SD530 V3 (ThinkSystem) XCC Versions not published
SD550 V3 (ThinkSystem) XCC Versions not published
SD630 V2 (ThinkSystem) XCC Versions not published
SD650 DWC Dual Node Tray (ThinkSystem) XCC Versions not published
SD650 V2 (ThinkSystem) XCC Versions not published
SD650 V3 (ThinkSystem) XCC Versions not published
SD650-N V2 (ThinkSystem) XCC Versions not published
SD665 V3 (ThinkSystem) XCC Versions not published
SE350 (ThinkSystem) XCC Versions not published
SE350 V2 (ThinkEdge) XCC Versions not published
SE360 V2 (ThinkEdge) XCC Versions not published
SE450 (ThinkEdge) XCC Versions not published
SE455 V3 (ThinkEdge) XCC Versions not published
SN550 (ThinkSystem) XCC Versions not published
SN550 V2 (ThinkSystem) XCC Versions not published
SN850 (ThinkSystem) XCC Versions not published
SR150 (ThinkSystem) XCC Versions not published
SR158 (ThinkSystem) XCC Versions not published
SR250 (ThinkSystem) XCC Versions not published
SR250 V2 (ThinkSystem) XCC Versions not published
SR250 V3 (ThinkSystem) XCC Versions not published
SR258 (ThinkSystem) XCC Versions not published
SR258 V2 (ThinkSystem) XCC Versions not published
SR258 V3 (ThinkSystem) XCC Versions not published
SR530 (ThinkSystem) XCC Versions not published
SR550 (ThinkSystem) XCC Versions not published
SR570 (ThinkSystem) XCC Versions not published
SR590 (ThinkSystem) XCC Versions not published
SR630 (ThinkSystem) XCC Versions not published
SR630 V2 (ThinkSystem) XCC Versions not published
SR630 V3 (ThinkSystem) XCC Versions not published
SR635 V3 (ThinkSystem) XCC Versions not published
SR645 (ThinkSystem) XCC Versions not published
SR645 V3 (ThinkSystem) XCC Versions not published
SR650 (ThinkSystem) XCC Versions not published
SR650 V2 (ThinkSystem) XCC Versions not published
SR650 V3 (ThinkSystem) XCC Versions not published
SR655 V3 (ThinkSystem) XCC Versions not published
SR665 (ThinkSystem) XCC Versions not published
SR665 V3 (ThinkSystem) XCC Versions not published
SR670 (ThinkSystem) XCC Versions not published
SR670 V2 (ThinkSystem) XCC Versions not published
SR675 V3 (ThinkSystem) XCC Versions not published
SR850 (ThinkSystem) XCC Versions not published
SR850 V2 (ThinkSystem) XCC Versions not published
SR850 V3 (ThinkSystem) XCC Versions not published
SR850P (ThinkSystem) XCC Versions not published
SR860 (ThinkSystem) XCC Versions not published
SR860 V2 (ThinkSystem) XCC Versions not published
SR860 V3 (ThinkSystem) XCC Versions not published
SR950 (ThinkSystem) XCC Versions not published
SR950 V3 (ThinkSystem) XCC Versions not published
ST250 (ThinkSystem) XCC Versions not published
ST250 V2 (ThinkSystem) XCC Versions not published
ST258 (ThinkSystem) XCC Versions not published
ST258 V2 (ThinkSystem) XCC Versions not published
ST258 V3 (ThinkSystem) XCC Versions not published
ST550 (ThinkSystem) XCC Versions not published
ST650 V2 (ThinkSystem) XCC Versions not published
ST650 V3 (ThinkSystem) XCC Versions not published
ST658 V2 (ThinkSystem) XCC Versions not published
ST658 V3 (ThinkSystem) XCC Versions not published
ThinkAgile MX1021 on SE350 XCC Versions not published
VX 1SE Certified Node (ThinkAgile) XCC Versions not published
VX 2U4N Certified Node (ThinkAgile) XCC Versions not published
VX 4U Certified Node (ThinkAgile) XCC Versions not published
VX1320 (ThinkAgile) XCC Versions not published
VX2320 (ThinkAgile) XCC Versions not published
VX2330 Appliance (ThinkAgile) XCC Versions not published
VX3320 (ThinkAgile) XCC Versions not published
VX3330 Appliance (ThinkAgile) XCC Versions not published
thinksystem_st650_v3_firmware Versions not published
thinksystem_sr675_v3_firmware Versions not published
thinkedge_se350_v2_firmware Versions not published
thinkedge_se450__firmware Versions not published
thinkedge_se455_v3_firmware Versions not published
thinkagile_hx7530_firmware Versions not published
thinksystem_st250_v3_firmware Versions not published
thinkagile_hx1320_firmware Versions not published
thinkagile_hx3375_firmware Versions not published
thinkagile_hx_enclosure_certified_node_firmware Versions not published
thinkagile_hx1021_edge_certified_node_3yr_firmware Versions not published
thinkagile_hx7820_firmware Versions not published
thinksystem_sd530_v3_firmware Versions not published
thinksystem_sd630_v2_firmware Versions not published
thinksystem_sr630_v3_firmware Versions not published
thinksystem_sr635_v3_firmware Versions not published
thinksystem_sr850_v3_firmware Versions not published
thinksystem_sr950_v3_firmware Versions not published
VX3520-G (ThinkAgile) XCC Versions not published
VX3530-G Appliance (ThinkAgile) XCC Versions not published
VX3720 (ThinkAgile) XCC Versions not published
VX5520 (ThinkAgile) XCC Versions not published
VX5530 Appliance (ThinkAgile) XCC Versions not published
VX635 V3 Integrated System (ThinkAgile) XCC Versions not published
VX645 V3 Certified Node (ThinkAgile) XCC Versions not published
VX645 V3 Integrated System (ThinkAgile) XCC Versions not published
VX655 V3 Certified Node (ThinkAgile) XCC Versions not published
VX655 V3 Integrated System (ThinkAgile) XCC Versions not published
VX665 V3 Certified Node (ThinkAgile) XCC Versions not published
VX665 V3 Integrated System (ThinkAgile) XCC Versions not published
VX7320 N (ThinkAgile) XCC Versions not published
VX7330 Appliance (Thinkagile) XCC Versions not published
VX7520 (ThinkAgile) XCC Versions not published
VX7520 N (ThinkAgile) XCC Versions not published
VX7530 Appliance (ThinkAgile) XCC Versions not published
VX7531 Certified Node (ThinkAgile) XCC Versions not published
VX7820 (ThinkAgile) XCC Versions not published

Other CVEs of HX5530 Appliance (ThinkAgile) XCC

The 5 CVEs of HX5530 Appliance (ThinkAgile) XCC →
CVE-2024-8281 An input validation weakness was discovered in XCC that could allow a valid, authenticated XCC user with elevated… 7.2 High CVE-2024-8280 An input validation weakness was discovered in XCC that could allow a valid, authenticated XCC user with elevated… 7.2 High CVE-2024-8279 A privilege escalation vulnerability was discovered in XCC that could allow a valid, authenticated XCC user with… 7.2 High CVE-2024-8059 IPMI credentials may be captured in XCC audit log entries when the account username length is 16 characters 4.3 Medium
Track this CVE