CVE-2024-8278
- State
- Published
- Severity
- 7.2 High
- Published
- Sep 13, 2024
- Updated
- Sep 13, 2024
- Reserved
- Aug 28, 2024
Description
A privilege escalation vulnerability was discovered in XCC that could allow a valid, authenticated XCC user with elevated privileges to perform command injection via specially crafted IPMI commands.
Scores
| CVSS | Score | Vector | Source |
|---|---|---|---|
| 3.1 | 7.2 High | CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H | lenovo |
Weaknesses
- CWE-78 Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')
Affected Products
| Product | Versions |
|---|---|
HX5530 Appliance (ThinkAgile) XCCLenovo |
|
HX7530 Appliance (ThinkAgile) XCCLenovo |
|
ST250 V3 (ThinkSystem) XCCLenovo |
|
VX3331 Certified Node (ThinkAgile) XCCLenovo |
|
HX Enclosure Certified Node (ThinkAgile) XCCLenovo |
|
HX1021 Edge Certified Node 3yr (ThinkAgile) XCCLenovo |
|
HX1320 Appliance (ThinkAgile) XCCLenovo |
|
HX1321 Certified Node (ThinkAgile) XCCLenovo |
|
HX1331 Certified Node (ThinkAgile) XCCLenovo |
|
HX1520-R Appliance (ThinkAgile) XCCLenovo |
|
HX1521-R Certified Node (ThinkAgile) XCCLenovo |
|
HX2320-E Appliance (ThinkAgile) XCCLenovo |
|
HX2321 Certified Node (ThinkAgile) XCCLenovo |
|
HX2330 Appliance (ThinkAgile) XCCLenovo |
|
HX2331 Certified Node (ThinkAgile) XCCLenovo |
|
HX2720-E Appliance (ThinkAgile) XCCLenovo |
|
HX3320 Appliance (ThinkAgile) XCCLenovo |
|
HX3321 Certified Node (ThinkAgile) XCCLenovo |
|
HX3330 Appliance (ThinkAgile) XCCLenovo |
|
HX3331 Certified Node (ThinkAgile) XCCLenovo |
|
HX3331 Node SAP HANA (ThinkAgile) XCCLenovo |
|
HX3375 Appliance (ThinkAgile) XCCLenovo |
|
HX3376 Certified Node (ThinkAgile) XCCLenovo |
|
HX3520-G Appliance (ThinkAgile) XCCLenovo |
|
HX3521-G Certified Node (ThinkAgile) XCCLenovo |
|
HX3720 Appliance (ThinkAgile) XCCLenovo |
|
HX3721 Certified Node (ThinkAgile) XCCLenovo |
|
HX5520 Appliance (ThinkAgile) XCCLenovo |
|
HX5520-C Appliance (ThinkAgile) XCCLenovo |
|
HX5521 Certified Node (ThinkAgile) XCCLenovo |
|
HX5521-C Certified Node (ThinkAgile) XCCLenovo |
|
HX5531 Certified Node (ThinkAgile) XCCLenovo |
|
HX7520 Appliance (ThinkAgile) XCCLenovo |
|
HX7521 Certified Node (ThinkAgile) XCCLenovo |
|
HX7530 Appl for SAP HANA (ThinkAgile) XCCLenovo |
|
HX7531 Certified Node (ThinkAgile) XCCLenovo |
|
HX7531 Node SAP HANA (ThinkAgile) XCCLenovo |
|
HX7820 Appliance (ThinkAgile) XCCLenovo |
|
HX7821 Certified Node (ThinkAgile) XCCLenovo |
|
MX Edge Appliance - MX1020 (ThinkAgile) XCCLenovo |
|
MX3330-F All-flash Appliance (ThinkAgile) XCCLenovo |
|
MX3330-H Hybrid Appliance (ThinkAgile) XCCLenovo |
|
MX3331-F All-flash Certified node (ThinkAgile) XCCLenovo |
|
MX3331-H Hybrid Certified node (ThinkAgile) XCCLenovo |
|
MX3530 F All flash Appliance (ThinkAgile) XCCLenovo |
|
MX3530-H Hybrid Appliance (ThinkAgile) XCCLenovo |
|
MX3531 H Hybrid Certified node (ThinkAgile) XCCLenovo |
|
MX3531-F All-flash Certified node (ThinkAgile) XCCLenovo |
|
P920 Rack Workstation (ThinkStation) XCCLenovo |
|
SD530 (ThinkSystem) XCCLenovo |
|
SD530 V3 (ThinkSystem) XCCLenovo |
|
SD550 V3 (ThinkSystem) XCCLenovo |
|
SD630 V2 (ThinkSystem) XCCLenovo |
|
SD650 DWC Dual Node Tray (ThinkSystem) XCCLenovo |
|
SD650 V2 (ThinkSystem) XCCLenovo |
|
SD650 V3 (ThinkSystem) XCCLenovo |
|
SD650-N V2 (ThinkSystem) XCCLenovo |
|
SD665 V3 (ThinkSystem) XCCLenovo |
|
SE350 (ThinkSystem) XCCLenovo |
|
SE350 V2 (ThinkEdge) XCCLenovo |
|
SE360 V2 (ThinkEdge) XCCLenovo |
|
SE450 (ThinkEdge) XCCLenovo |
|
SE455 V3 (ThinkEdge) XCCLenovo |
|
SN550 (ThinkSystem) XCCLenovo |
|
SN550 V2 (ThinkSystem) XCCLenovo |
|
SN850 (ThinkSystem) XCCLenovo |
|
SR150 (ThinkSystem) XCCLenovo |
|
SR158 (ThinkSystem) XCCLenovo |
|
SR250 (ThinkSystem) XCCLenovo |
|
SR250 V2 (ThinkSystem) XCCLenovo |
|
SR250 V3 (ThinkSystem) XCCLenovo |
|
SR258 (ThinkSystem) XCCLenovo |
|
SR258 V2 (ThinkSystem) XCCLenovo |
|
SR258 V3 (ThinkSystem) XCCLenovo |
|
SR530 (ThinkSystem) XCCLenovo |
|
SR550 (ThinkSystem) XCCLenovo |
|
SR570 (ThinkSystem) XCCLenovo |
|
SR590 (ThinkSystem) XCCLenovo |
|
SR630 (ThinkSystem) XCCLenovo |
|
SR630 V2 (ThinkSystem) XCCLenovo |
|
SR630 V3 (ThinkSystem) XCCLenovo |
|
SR635 V3 (ThinkSystem) XCCLenovo |
|
SR645 (ThinkSystem) XCCLenovo |
|
SR645 V3 (ThinkSystem) XCCLenovo |
|
SR650 (ThinkSystem) XCCLenovo |
|
SR650 V2 (ThinkSystem) XCCLenovo |
|
SR650 V3 (ThinkSystem) XCCLenovo |
|
SR655 V3 (ThinkSystem) XCCLenovo |
|
SR665 (ThinkSystem) XCCLenovo |
|
SR665 V3 (ThinkSystem) XCCLenovo |
|
SR670 (ThinkSystem) XCCLenovo |
|
SR670 V2 (ThinkSystem) XCCLenovo |
|
SR675 V3 (ThinkSystem) XCCLenovo |
|
SR850 (ThinkSystem) XCCLenovo |
|
SR850 V2 (ThinkSystem) XCCLenovo |
|
SR850 V3 (ThinkSystem) XCCLenovo |
|
SR850P (ThinkSystem) XCCLenovo |
|
SR860 (ThinkSystem) XCCLenovo |
|
SR860 V2 (ThinkSystem) XCCLenovo |
|
SR860 V3 (ThinkSystem) XCCLenovo |
|
SR950 (ThinkSystem) XCCLenovo |
|
SR950 V3 (ThinkSystem) XCCLenovo |
|
ST250 (ThinkSystem) XCCLenovo |
|
ST250 V2 (ThinkSystem) XCCLenovo |
|
ST258 (ThinkSystem) XCCLenovo |
|
ST258 V2 (ThinkSystem) XCCLenovo |
|
ST258 V3 (ThinkSystem) XCCLenovo |
|
ST550 (ThinkSystem) XCCLenovo |
|
ST650 V2 (ThinkSystem) XCCLenovo |
|
ST650 V3 (ThinkSystem) XCCLenovo |
|
ST658 V2 (ThinkSystem) XCCLenovo |
|
ST658 V3 (ThinkSystem) XCCLenovo |
|
ThinkAgile MX1021 on SE350 XCCLenovo |
|
VX 1SE Certified Node (ThinkAgile) XCCLenovo |
|
VX 2U4N Certified Node (ThinkAgile) XCCLenovo |
|
VX 4U Certified Node (ThinkAgile) XCCLenovo |
|
VX1320 (ThinkAgile) XCCLenovo |
|
VX2320 (ThinkAgile) XCCLenovo |
|
VX2330 Appliance (ThinkAgile) XCCLenovo |
|
VX3320 (ThinkAgile) XCCLenovo |
|
VX3330 Appliance (ThinkAgile) XCCLenovo |
|
VX3520-G (ThinkAgile) XCCLenovo |
|
VX3530-G Appliance (ThinkAgile) XCCLenovo |
|
VX3720 (ThinkAgile) XCCLenovo |
|
VX5520 (ThinkAgile) XCCLenovo |
|
VX5530 Appliance (ThinkAgile) XCCLenovo |
|
VX635 V3 Integrated System (ThinkAgile) XCCLenovo |
|
VX645 V3 Certified Node (ThinkAgile) XCCLenovo |
|
VX645 V3 Integrated System (ThinkAgile) XCCLenovo |
|
VX655 V3 Certified Node (ThinkAgile) XCCLenovo |
|
VX655 V3 Integrated System (ThinkAgile) XCCLenovo |
|
VX665 V3 Certified Node (ThinkAgile) XCCLenovo |
|
VX665 V3 Integrated System (ThinkAgile) XCCLenovo |
|
VX7320 N (ThinkAgile) XCCLenovo |
|
VX7330 Appliance (Thinkagile) XCCLenovo |
|
VX7520 (ThinkAgile) XCCLenovo |
|
VX7520 N (ThinkAgile) XCCLenovo |
|
VX7530 Appliance (ThinkAgile) XCCLenovo |
|
VX7531 Certified Node (ThinkAgile) XCCLenovo |
|
VX7820 (ThinkAgile) XCCLenovo |
|
References
Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.