CVE-2023-4606

🗓️ 24 Oct 2023 20:25:09Reported by lenovoType

An authenticated XCC user can change another user's password through a crafted API command

Reporter	Title	Published	Views	Family All 9
Circl	CVE-2023-4606	4 Jan 202404:09	–	circl
CNNVD	Lenovo XClarity Controller Security Vulnerability	25 Oct 202300:00	–	cnnvd
Cvelist	CVE-2023-4606	24 Oct 202320:25	–	cvelist
EUVD	EUVD-2023-54459	3 Oct 202520:07	–	euvd
NVD	CVE-2023-4606	25 Oct 202318:17	–	nvd
Prion	Command injection	25 Oct 202318:17	–	prion
Positive Technologies	PT-2023-29817 · Lenovo · Thinksystem	24 Oct 202300:00	–	ptsecurity
RedhatCVE	CVE-2023-4606	23 May 202504:45	–	redhatcve
Vulnrichment	CVE-2023-4606	24 Oct 202320:25	–	vulnrichment

NVD

Vulners

Node

lenovo thinkagile_hx5530_firmwareMatch-

AND

lenovo thinkagile_hx5530Match-

Node

lenovo thinkagile_hx7530_firmwareMatch-

AND

lenovo thinkagile_hx7530Match-

Node

lenovo thinkagile_vx3331_firmwareMatch-

AND

lenovo thinkagile_vx3331Match-

Node

lenovo thinkagile_hx1331_firmwareMatch-

AND

lenovo thinkagile_hx1331Match-

Node

lenovo thinkagile_hx2330_firmwareMatch-

AND

lenovo thinkagile_hx2330Match-

Node

lenovo thinkagile_hx2331_firmwareMatch-

AND

lenovo thinkagile_hx2331Match-

Node

lenovo thinkagile_hx3330_firmwareMatch-

AND

lenovo thinkagile_hx3330Match-

Node

lenovo thinkagile_hx3331_firmwareMatch-

AND

lenovo thinkagile_hx3331Match-

Node

lenovo thinkagile_hx3331_firmwareMatch-

AND

lenovo thinkagile_hx3331Match-

Node

lenovo thinkagile_hx3375_firmwareMatch-

AND

lenovo thinkagile_hx3375Match-

Node

lenovo thinkagile_hx3376_firmwareMatch-

AND

lenovo thinkagile_hx3376Match-

Node

lenovo thinkagile_hx5531_firmwareMatch-

AND

lenovo thinkagile_hx5531Match-

Node

lenovo thinkagile_hx7530_firmwareMatch-

AND

lenovo thinkagile_hx7530Match-

Node

lenovo thinkagile_hx7531_firmwareMatch-

AND

lenovo thinkagile_hx7531Match-

Node

lenovo thinkagile_hx7531_firmwareMatch-

AND

lenovo thinkagile_hx7531Match-

Node

lenovo thinkagile_mx3330-f_all-flash_firmwareMatch-

AND

lenovo thinkagile_mx3330-f_all-flashMatch-

Node

lenovo thinkagile_mx3330-h_hybrid_firmwareMatch-

AND

lenovo thinkagile_mx3330-h_hybridMatch-

Node

lenovo thinkagile_mx3331-f_all-flash_firmwareMatch-

AND

lenovo thinkagile_mx3331-f_all-flashMatch-

Node

lenovo thinkagile_mx3331-h_hybrid_firmwareMatch-

AND

lenovo thinkagile_mx3331-h_hybridMatch-

Node

lenovo thinkagile_mx3530_f_all_flash_firmwareMatch-

AND

lenovo thinkagile_mx3530_f_all_flashMatch-

Node

lenovo thinkagile_mx3530-h_hybrid_firmwareMatch-

AND

lenovo thinkagile_mx3530-h_hybridMatch-

Node

lenovo thinkagile_mx3531_h_hybrid_firmwareMatch-

AND

lenovo thinkagile_mx3531_h_hybridMatch-

Node

lenovo thinkagile_mx3531-f_all-flash_firmwareMatch-

AND

lenovo thinkagile_mx3531-f_all-flashMatch-

Node

lenovo thinkagile_vx2330_firmwareMatch-

AND

lenovo thinkagile_vx2330Match-

Node

lenovo thinkagile_vx3330_firmwareMatch-

AND

lenovo thinkagile_vx3330Match-

Node

lenovo thinkagile_vx3530-g_firmwareMatch-

AND

lenovo thinkagile_vx3530-gMatch-

Node

lenovo thinkagile_vx5530_firmwareMatch-

AND

lenovo thinkagile_vx5530Match-

Node

lenovo thinkagile_vx7330_firmwareMatch-

AND

lenovo thinkagile_vx7330Match-

Node

lenovo thinkagile_vx7530_firmwareMatch-

AND

lenovo thinkagile_vx7530Match-

Node

lenovo thinkagile_vx7531_firmwareMatch-

AND

lenovo thinkagile_vx7531Match-

Node

lenovo thinksystem_sd630_v2_firmwareMatch-

AND

lenovo thinksystem_sd630_v2Match-

Node

lenovo thinksystem_sd650_v2_firmwareMatch-

AND

lenovo thinksystem_sd650_v2Match-

Node

lenovo thinksystem_sd650_v3_firmwareMatch-

Node

lenovo thinksystem_sd650-n_v2_firmwareMatch-

AND

lenovo thinksystem_sd650-n_v2Match-

Node

lenovo thinksystem_sd665_v3_firmwareMatch-

Node

lenovo thinksystem_sn550_v2_firmwareMatch-

AND

lenovo thinksystem_sn550_v2Match-

Node

lenovo thinksystem_sr250_firmwareMatch-

AND

lenovo thinksystem_sr250_v2Match-

Node

lenovo thinksystem_sr258_v2_firmwareMatch-

AND

lenovo thinksystem_sr258_v2Match-

Node

lenovo thinksystem_sr630_v2_firmwareMatch-

AND

lenovo thinksystem_sr630_v2Match-

Node

lenovo thinksystem_sr630_v3_firmwareMatch-

Node

lenovo thinksystem_sr635_v3_firmwareMatch-

Node

lenovo thinksystem_sr645_firmwareMatch-

AND

lenovo thinksystem_sr645Match-

Node

lenovo thinksystem_sr645_v3_firmwareMatch-

AND

lenovo thinksystem_sr645_v3Match-

Node

lenovo thinksystem_sr650_v2_firmwareMatch-

AND

lenovo thinksystem_sr650_v2Match-

Node

lenovo thinksystem_sr650_v3_firmwareMatch-

Node

lenovo thinksystem_sr655_v3_firmwareMatch-

Node

lenovo thinksystem_sr665_firmwareMatch-

AND

lenovo thinksystem_sr665Match-

Node

lenovo thinksystem_sr665_v3_firmwareMatch-

Node

lenovo thinksystem_sr670_firmwareMatch-

AND

lenovo thinksystem_sr670Match-

Node

lenovo thinksystem_sr670_v2_firmwareMatch-

AND

lenovo thinksystem_sr670_v2Match-

Node

lenovo thinksystem_sr675_v3_firmwareMatch-

Node

lenovo thinksystem_sr850_v2_firmwareMatch-

AND

lenovo thinksystem_sr850_v2Match-

Node

lenovo thinksystem_sr850_v2_firmwareMatch-

AND

lenovo thinksystem_sr850_v2Match-

Node

lenovo thinksystem_sr850_v3_firmwareMatch-

Node

lenovo thinksystem_sr860_v2_firmwareMatch-

AND

lenovo thinksystem_sr860_v2Match-

Node

lenovo thinksystem_sr860_v2_firmwareMatch-

AND

lenovo thinksystem_sr860_v2Match-

Node

lenovo thinksystem_sr860_v3_firmwareMatch-

Node

lenovo thinksystem_st250_v2_firmwareMatch-

AND

lenovo thinksystem_st250_v2Match-

Node

lenovo thinksystem_st258_v2_firmwareMatch-

AND

lenovo thinksystem_st258_v2Match-

Node

lenovo thinksystem_st650_v2_firmwareMatch-

AND

lenovo thinksystem_st650_v2Match-

Node

lenovo thinksystem_st650_v3_firmwareMatch-

Node

lenovo thinksystem_st658_v2_firmwareMatch-

AND

lenovo thinksystem_st658_v2Match-

Node

lenovo thinksystem_st658_v3_firmwareMatch-

[
  {
    "defaultStatus": "unaffected",
    "product": "Lenovo XClarity Controller (XCC)",
    "vendor": "Lenovo",
    "versions": [
      {
        "status": "affected",
        "version": "various"
      }
    ]
  }
]

Source	Link
support	www.support.lenovo.com/us/en/product_security/LEN-140960

21 Nov 2024 08:35Current

7.9High risk

Vulners AI Score7.9

CVSS 3.18.1

EPSS0.00117

SSVC

CWE-862