7.2
Élevée
CVE-2024-38509 A privilege escalation vulnerability was discovered in XCC that could allow an authenticated XCC user with elevated…
Description
A privilege escalation vulnerability was discovered in XCC that could allow an authenticated XCC user with elevated privileges to execute arbitrary code via a specially crafted IPMI command.
Produits et versions touchés
| Produit | Versions touchées | Corrigé en |
|---|---|---|
| XClarity Controller | Versions non publiées | |
| thinkagile_hx5530_firmware 4.71 | premières → < 4.71 | 4.71 |
| thinkagile_hx7530_firmware 4.71 | premières → < 4.71 | 4.71 |
| thinkagile_vx3331_firmware 4.71 | premières → < 4.71 | 4.71 |
| thinkagile_hx_enclosure_certified_node_firmware 4.11 | premières → < 4.11 | 4.11 |
| thinkagile_hx1021_edg_firmware 4.11 | premières → < 4.11 | 4.11 |
| thinkagile_hx1320_firmware 9.97 | premières → < 9.97 | 9.97 |
| thinkagile_hx1331_firmware 4.71 | premières → < 4.71 | 4.71 |
| thinkagile_hx1321_firmware 9.97 | premières → < 9.97 | 9.97 |
Afficher les 107 autres branches Masquer les 107 autres branches
| Produit | Versions touchées | Corrigé en |
|---|---|---|
| thinkagile_hx1520-r_firmware 9.97 | premières → < 9.97 | 9.97 |
| thinkagile_hx1521-r_firmware 9.97 | premières → < 9.97 | 9.97 |
| thinkagile_hx2320-e_firmware 9.97 | premières → < 9.97 | 9.97 |
| thinkagile_hx2321_firmware 9.97 | premières → < 9.97 | 9.97 |
| thinkagile_hx2330_firmware 4.71 | premières → < 4.71 | 4.71 |
| thinkagile_hx2331_firmware 4.71 | premières → < 4.71 | 4.71 |
| thinkagile_hx2720-e_firmware 4.11 | premières → < 4.11 | 4.11 |
| thinkagile_hx3320_firmware 9.97 | premières → < 9.97 | 9.97 |
| thinkagile_hx3321_firmware 9.97 | premières → < 9.97 | 9.97 |
| thinkagile_hx3330_firmware 4.71 | premières → < 4.71 | 4.71 |
| thinkagile_hx3331 4.71 | premières → < 4.71 | 4.71 |
| thinkagile_hx3375_firmware 5.61 | premières → < 5.61 | 5.61 |
| thinkagile_hx3376_firmware 5.61 | premières → < 5.61 | 5.61 |
| thinkagile_hx3520-g_firmware 9.97 | premières → < 9.97 | 9.97 |
| thinkagile_hx3521-g_firmware 9.97 | premières → < 9.97 | 9.97 |
| thinkagile_hx3720_firmware 4.11 | premières → < 4.11 | 4.11 |
| thinkagile_hx3721_firmware 4.11 | premières → < 4.11 | 4.11 |
| thinkagile_hx5520-c_firmware 9.97 | premières → < 9.97 | 9.97 |
| thinkagile_hx5521-c_firmware 9.97 | premières → < 9.97 | 9.97 |
| thinkagile_hx5531_firmware 4.71 | premières → < 4.71 | 4.71 |
| thinkagile_hx7520_firmware 9.97 | premières → < 9.97 | 9.97 |
| thinkagile_hx7521_firmware 9.97 | premières → < 9.97 | 9.97 |
| thinkagile_hx7531_firmware 4.71 | premières → < 4.71 | 4.71 |
| thinkagile_hx7820_firmware 3.11 | premières → < 3.11 | 3.11 |
| thinkagile_hx7821_firmware 3.11 | premières → < 3.11 | 3.11 |
| thinkagile_mx1020_firmware 4.11 | premières → < 4.11 | 4.11 |
| thinkagile_mx3330-f_firmware 4.71 | premières → < 4.71 | 4.71 |
| thinkagile_mx3330-h_firmware 4.71 | premières → < 4.71 | 4.71 |
| thinkagile_mx3331-f_firmware 4.71 | premières → < 4.71 | 4.71 |
| thinkagile_mx3331-h_firmware 4.71 | premières → < 4.71 | 4.71 |
| thinkagile_mx3530_f_firmware 4.71 | premières → < 4.71 | 4.71 |
| thinkagile_mx3530-h_firmware 4.71 | premières → < 4.71 | 4.71 |
| thinkagile_mx3531-f_firmware 4.71 | premières → < 4.71 | 4.71 |
| thinkagile_vx1320_firmware 4.11 | premières → < 4.11 | 4.11 |
| thinkagile_vx2320_firmware 9.97 | premières → < 9.97 | 9.97 |
| thinkagile_vx2330_firmware 4.71 | premières → < 4.71 | 4.71 |
| thinkagile_vx3320_firmware 9.97 | premières → < 9.97 | 9.97 |
| thinkagile_vx3330_firmware 4.71 | premières → < 4.71 | 4.71 |
| thinkagile_vx3520-g_firmware 9.97 | premières → < 9.97 | 9.97 |
| thinkagile_vx3530-g_firmware 4.71 | premières → < 4.71 | 4.71 |
| thinkagile_vx3720_firmware 4.11 | premières → < 4.11 | 4.11 |
| thinkagile_vx5520_firmware 9.97 | premières → < 9.97 | 9.97 |
| thinkagile_vx5530_firmware 4.71 | premières → < 4.71 | 4.71 |
| thinkagile_vx7320_n_firmware 9.97 | premières → < 9.97 | 9.97 |
| thinkagile_vx7330_firmware 4.71 | premières → < 4.71 | 4.71 |
| thinkagile_vx7520_firmware 9.97 | premières → < 9.97 | 9.97 |
| thinkagile_vx7520_n_firmware 9.97 | premières → < 9.97 | 9.97 |
| thinkagile_vx7530_firmware 4.71 | premières → < 4.71 | 4.71 |
| thinkagile_vx7531_firmware 4.71 | premières → < 4.71 | 4.71 |
| thinkagile_vx7820_firmware 3.11 | premières → < 3.11 | 3.11 |
| thinkstation_p920_workstation_firmware 9.97 | premières → < 9.97 | 9.97 |
| thinksystem_st250_firmware 4.11 | premières → < 4.11 | 4.11 |
| thinksystem_sd530_firmware 4.11 | premières → < 4.11 | 4.11 |
| thinksystem_sd630_v2_firmware 4.11 | premières → < 4.11 | 4.11 |
| thinksystem_sd650_dual_node_tray_firmware 6.36 | premières → < 6.36 | 6.36 |
| thinksystem_sd650_dual_node_tray_firmware 4.11 | premières → < 4.11 | 4.11 |
| thinksystem_sd650-n_v2_firmware 4.11 | premières → < 4.11 | 4.11 |
| thinksystem_sd650_v3_firmware 4.11 | premières → < 4.11 | 4.11 |
| thinksystem_sd665_v3_firmware 5.11 | premières → < 5.11 | 5.11 |
| thinksystem_se350_firmware 4.11 | premières → < 4.11 | 4.11 |
| thinksystem_sn550_firmware 6.36 | premières → < 6.36 | 6.36 |
| thinksystem_sn550_firmware 4.11 | premières → < 4.11 | 4.11 |
| thinksystem_sn550_v2_firmware 4.11 | premières → < 4.11 | 4.11 |
| thinksystem_sn850_firmware 6.36 | premières → < 6.36 | 6.36 |
| thinksystem_sn850_firmware 4.11 | premières → < 4.11 | 4.11 |
| thinksystem_sr150_firmware 4.11 | premières → < 4.11 | 4.11 |
| thinksystem_sr158_firmware 4.11 | premières → < 4.11 | 4.11 |
| thinksystem_sr250_firmware 4.11 | premières → < 4.11 | 4.11 |
| thinksystem_sr250_v2_firmware 4.11 | premières → < 4.11 | 4.11 |
| thinksystem_sr258_firmware 4.11 | premières → < 4.11 | 4.11 |
| thinksystem_sr258_v2_firmware 4.11 | premières → < 4.11 | 4.11 |
| thinksystem_sr530_firmware 9.97 | premières → < 9.97 | 9.97 |
| thinksystem_sr550_firmware 9.97 | premières → < 9.97 | 9.97 |
| thinksystem_sr570_firmware 9.97 | premières → < 9.97 | 9.97 |
| thinksystem_sr590_firmware 9.97 | premières → < 9.97 | 9.97 |
| thinksystem_sr630_firmware 9.97 | premières → < 9.97 | 9.97 |
| thinksystem_sr630_v2_firmware 4.71 | premières → < 4.71 | 4.71 |
| thinksystem_sr630_v3_firmware 4.51 | premières → < 4.51 | 4.51 |
| thinksystem_sr635_firmware 2.81 | premières → < 2.81 | 2.81 |
| thinksystem_sr645_firmware 5.61 | premières → < 5.61 | 5.61 |
| thinksystem_sr645_v3_firmware 2.81 | premières → < 2.81 | 2.81 |
| thinksystem_sr650_firmware 9.97 | premières → < 9.97 | 9.97 |
| thinksystem_sr650_v2_firmware 4.71 | premières → < 4.71 | 4.71 |
| thinksystem_sr655_v3_firmware 2.81 | premières → < 2.81 | 2.81 |
| thinksystem_sr665_firmware 5.61 | premières → < 5.61 | 5.61 |
| thinksystem_sr665_v3_firmware 5.61 | premières → < 5.61 | 5.61 |
| thinksystem_sr665_v3_firmware 2.81 | premières → < 2.81 | 2.81 |
| thinksystem_sr670_firmware 4.11 | premières → < 4.11 | 4.11 |
| thinksystem_sr670_v2_firmware 5.11 | premières → < 5.11 | 5.11 |
| thinksystem_sr675_v3_firmware 5.11 | premières → < 5.11 | 5.11 |
| thinksystem_sr850_firmware 6.36 | premières → < 6.36 | 6.36 |
| thinksystem_sr850_firmware 4.11 | premières → < 4.11 | 4.11 |
| thinksystem_sr850_v2_firmware 4.11 | premières → < 4.11 | 4.11 |
| thinksystem_sr850_v3_firmware 1.20 | premières → < 1.20 | 1.20 |
| thinksystem_sr850p_firmware 6.36 | premières → < 6.36 | 6.36 |
| thinksystem_sr860_firmware 4.11 | premières → < 4.11 | 4.11 |
| thinksystem_sr860_v2_firmware 4.11 | premières → < 4.11 | 4.11 |
| thinksystem_sr860_v3_firmware 1.20 | premières → < 1.20 | 1.20 |
| thinksystem_sr950_firmware 3.11 | premières → < 3.11 | 3.11 |
| thinksystem_st250_v2_firmware 4.11 | premières → < 4.11 | 4.11 |
| thinksystem_st258_firmware 4.11 | premières → < 4.11 | 4.11 |
| thinksystem_st258_v2_firmware 4.11 | premières → < 4.11 | 4.11 |
| thinksystem_st550_firmware 9.97 | premières → < 9.97 | 9.97 |
| thinksystem_st650_v2_firmware 4.11 | premières → < 4.11 | 4.11 |
| thinksystem_st650_v3_firmware 4.11 | premières → < 4.11 | 4.11 |
| thinksystem_st658_v2_firmware 4.11 | premières → < 4.11 | 4.11 |
| thinksystem_st658_v3_firmware 4.11 | premières → < 4.11 | 4.11 |
Autres CVE de XClarity Controller
Les 11 CVE de XClarity Controller →
CVE-2024-38512
A privilege escalation vulnerability was discovered in XCC that could allow an authenticated XCC user with elevated…
7.2
Élevée
CVE-2024-38511
A privilege escalation vulnerability was discovered in an upload processing functionality of XCC that could allow an…
7.2
Élevée
CVE-2024-38510
A privilege escalation vulnerability was discovered in the SSH captive command shell interface that could allow an…
7.2
Élevée
CVE-2024-38508
A privilege escalation vulnerability was discovered in the web interface or SSH captive command shell interface of XCC…
7.2
Élevée