Lucene search

[email protected]CVE-2023-4607

HistoryOct 25, 2023 - 6:17 p.m.

CVE-2023-4607

2023-10-2518:17:41

CWE-269

[email protected]

web.nvd.nist.gov

cve-2023-4607

authenticated user

xcc

permissions change

crafted api command

nvd

8.8 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

8.4 High

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

19.3%

JSON

An authenticated XCC user can change permissions for any user through a crafted API command.

Affected configurations

NVD

Node

lenovothinkagile_hx5530_firmwareMatch-

AND

lenovothinkagile_hx5530Match-

Node

lenovothinkagile_hx7530_firmwareMatch-

AND

lenovothinkagile_hx7530Match-

Node

lenovothinkagile_vx3331_firmwareMatch-

AND

lenovothinkagile_vx3331Match-

Node

lenovothinkagile_hx1331_firmwareMatch-

AND

lenovothinkagile_hx1331Match-

Node

lenovothinkagile_hx2330_firmwareMatch-

AND

lenovothinkagile_hx2330Match-

Node

lenovothinkagile_hx2331_firmwareMatch-

AND

lenovothinkagile_hx2331Match-

Node

lenovothinkagile_hx3330_firmwareMatch-

AND

lenovothinkagile_hx3330Match-

Node

lenovothinkagile_hx3331_firmwareMatch-

AND

lenovothinkagile_hx3331Match-

Node

lenovothinkagile_hx3331_firmwareMatch-

AND

lenovothinkagile_hx3331Match-

Node

lenovothinkagile_hx3375_firmwareMatch-

AND

lenovothinkagile_hx3375Match-

Node

lenovothinkagile_hx3376_firmwareMatch-

AND

lenovothinkagile_hx3376Match-

Node

lenovothinkagile_hx5531_firmwareMatch-

AND

lenovothinkagile_hx5531Match-

Node

lenovothinkagile_hx7530_firmwareMatch-

AND

lenovothinkagile_hx7530Match-

Node

lenovothinkagile_hx7531_firmwareMatch-

AND

lenovothinkagile_hx7531Match-

Node

lenovothinkagile_hx7531_firmwareMatch-

AND

lenovothinkagile_hx7531Match-

Node

lenovothinkagile_mx3330-f_all-flash_firmwareMatch-

AND

lenovothinkagile_mx3330-f_all-flashMatch-

Node

lenovothinkagile_mx3330-h_hybrid_firmwareMatch-

AND

lenovothinkagile_mx3330-h_hybridMatch-

Node

lenovothinkagile_mx3331-f_all-flash_firmwareMatch-

AND

lenovothinkagile_mx3331-f_all-flashMatch-

Node

lenovothinkagile_mx3331-h_hybrid_firmwareMatch-

AND

lenovothinkagile_mx3331-h_hybridMatch-

Node

lenovothinkagile_mx3530_f_all_flash_firmwareMatch-

AND

lenovothinkagile_mx3530_f_all_flashMatch-

Node

lenovothinkagile_mx3530-h_hybrid_firmwareMatch-

AND

lenovothinkagile_mx3530-h_hybridMatch-

Node

lenovothinkagile_mx3531_h_hybrid_firmwareMatch-

AND

lenovothinkagile_mx3531_h_hybridMatch-

Node

lenovothinkagile_mx3531-f_all-flash_firmwareMatch-

AND

lenovothinkagile_mx3531-f_all-flashMatch-

Node

lenovothinkagile_vx2330_firmwareMatch-

AND

lenovothinkagile_vx2330Match-

Node

lenovothinkagile_vx3330_firmwareMatch-

AND

lenovothinkagile_vx3330Match-

Node

lenovothinkagile_vx3530-g_firmwareMatch-

AND

lenovothinkagile_vx3530-gMatch-

Node

lenovothinkagile_vx5530_firmwareMatch-

AND

lenovothinkagile_vx5530Match-

Node

lenovothinkagile_vx7330_firmwareMatch-

AND

lenovothinkagile_vx7330Match-

Node

lenovothinkagile_vx7530_firmwareMatch-

AND

lenovothinkagile_vx7530Match-

Node

lenovothinkagile_vx7531_firmwareMatch-

AND

lenovothinkagile_vx7531Match-

Node

lenovothinksystem_sd630_v2_firmwareMatch-

AND

lenovothinksystem_sd630_v2Match-

Node

lenovothinksystem_sd650_v2_firmwareMatch-

AND

lenovothinksystem_sd650_v2Match-

Node

lenovothinksystem_sd650_v3_firmwareMatch-

Node

lenovothinksystem_sd650-n_v2_firmwareMatch-

AND

lenovothinksystem_sd650-n_v2Match-

Node

lenovothinksystem_sd665_v3_firmwareMatch-

Node

lenovothinksystem_sn550_v2_firmwareMatch-

AND

lenovothinksystem_sn550_v2Match-

Node

lenovothinksystem_sr250_firmwareMatch-

AND

lenovothinksystem_sr250_v2Match-

Node

lenovothinksystem_sr258_v2_firmwareMatch-

AND

lenovothinksystem_sr258_v2Match-

Node

lenovothinksystem_sr630_v2_firmwareMatch-

AND

lenovothinksystem_sr630_v2Match-

Node

lenovothinksystem_sr630_v3_firmwareMatch-

Node

lenovothinksystem_sr635_v3_firmwareMatch-

Node

lenovothinksystem_sr645_firmwareMatch-

AND

lenovothinksystem_sr645Match-

Node

lenovothinksystem_sr645_v3_firmwareMatch-

AND

lenovothinksystem_sr645_v3Match-

Node

lenovothinksystem_sr650_v2_firmwareMatch-

AND

lenovothinksystem_sr650_v2Match-

Node

lenovothinksystem_sr650_v3_firmwareMatch-

Node

lenovothinksystem_sr655_v3_firmwareMatch-

Node

lenovothinksystem_sr665_firmwareMatch-

AND

lenovothinksystem_sr665Match-

Node

lenovothinksystem_sr665_v3_firmwareMatch-

Node

lenovothinksystem_sr670_firmwareMatch-

AND

lenovothinksystem_sr670Match-

Node

lenovothinksystem_sr670_v2_firmwareMatch-

AND

lenovothinksystem_sr670_v2Match-

Node

lenovothinksystem_sr675_v3_firmwareMatch-

Node

lenovothinksystem_sr850_v2_firmwareMatch-

AND

lenovothinksystem_sr850_v2Match-

Node

lenovothinksystem_sr850_v2_firmwareMatch-

AND

lenovothinksystem_sr850_v2Match-

Node

lenovothinksystem_sr850_v3_firmwareMatch-

Node

lenovothinksystem_sr860_v2_firmwareMatch-

AND

lenovothinksystem_sr860_v2Match-

Node

lenovothinksystem_sr860_v2_firmwareMatch-

AND

lenovothinksystem_sr860_v2Match-

Node

lenovothinksystem_sr860_v3_firmwareMatch-

Node

lenovothinksystem_st250_v2_firmwareMatch-

AND

lenovothinksystem_st250_v2Match-

Node

lenovothinksystem_st258_v2_firmwareMatch-

AND

lenovothinksystem_st258_v2Match-

Node

lenovothinksystem_st650_v2_firmwareMatch-

AND

lenovothinksystem_st650_v2Match-

Node

lenovothinksystem_st650_v3_firmwareMatch-

Node

lenovothinksystem_st658_v2_firmwareMatch-

AND

lenovothinksystem_st658_v2Match-

Node

lenovothinksystem_st658_v3_firmwareMatch-

Node

lenovothinkagile_hx_enclosure_firmwareMatch-

AND

lenovothinkagile_hx_enclosureMatch-

Node

lenovothinkagile_hx1021_edg_firmwareMatch-

AND

lenovothinkagile_hx1021_edgMatch-

Node

lenovothinkagile_hx1320_firmwareMatch-

AND

lenovothinkagile_hx1320Match-

Node

lenovothinkagile_hx1321_firmwareMatch-

AND

lenovothinkagile_hx1321Match-

Node

lenovothinkagile_hx1520-r_firmwareMatch-

AND

lenovothinkagile_hx1520-rMatch-

Node

lenovothinkagile_hx1521-r_firmwareMatch-

AND

lenovothinkagile_hx1521-rMatch-

Node

lenovothinkagile_hx2320-e_firmwareMatch-

AND

lenovothinkagile_hx2320-eMatch-

Node

lenovothinkagile_hx2321_firmwareMatch-

AND

lenovothinkagile_hx2321Match-

Node

lenovothinkagile_hx2720-e_firmwareMatch-

AND

lenovothinkagile_hx2720-eMatch-

Node

lenovothinkagile_hx3320_firmwareMatch-

AND

lenovothinkagile_hx3320Match-

Node

lenovothinkagile_hx3321_firmwareMatch-

AND

lenovothinkagile_hx3321Match-

Node

lenovothinkagile_hx3520-g_firmwareMatch-

AND

lenovothinkagile_hx3520-gMatch-

Node

lenovothinkagile_hx3521-g_firmwareMatch-

AND

lenovothinkagile_hx3521-gMatch-

Node

lenovothinkagile_hx3720_firmwareMatch-

AND

lenovothinkagile_hx3720Match-

Node

lenovothinkagile_hx3721_firmwareMatch-

AND

lenovothinkagile_hx3721Match-

Node

lenovothinkagile_hx5520_firmwareMatch-

AND

lenovothinkagile_hx5520Match-

Node

lenovothinkagile_hx5520-c_firmwareMatch-

AND

lenovothinkagile_hx5520-cMatch-

Node

lenovothinkagile_hx5521_firmwareMatch-

AND

lenovothinkagile_hx5521Match-

Node

lenovothinkagile_hx5521-c_firmwareMatch-

AND

lenovothinkagile_hx5521-cMatch-

Node

lenovothinkagile_hx7520_firmwareMatch-

AND

lenovothinkagile_hx7520Match-

Node

lenovothinkagile_hx7521_firmwareMatch-

AND

lenovothinkagile_hx7521Match-

Node

lenovothinkagile_hx7820_firmwareMatch-

AND

lenovothinkagile_hx7820Match-

Node

lenovothinkagile_hx7821_firmwareMatch-

AND

lenovothinkagile_hx7821Match-

Node

lenovothinkagile_mx_edge-_mx1020__firmwareMatch-

AND

lenovothinkagile_mx_edge-_mx1020_Match-

Node

lenovothinkagile_mx630_v3_firmwareMatch-

Node

lenovothinkagile_mx630_v3_intergrated_system_firmwareMatch-

Node

lenovothinkagile_mx650_v3_firmwareMatch-

Node

lenovothinkagile_mx650_v3_intergrated_system_firmwareMatch-

Node

lenovothinkagile_mx1021_on_se350_firmwareMatch-

AND

lenovothinkagile_mx1021_on_se350Match-

Node

lenovothinkagile_mx1021_on_se350_firmwareMatch-

AND

lenovothinkagile_mx1021_on_se350Match-

Node

lenovothinkagile_vx_1se_firmwareMatch-

AND

lenovothinkagile_vx_1seMatch-

Node

lenovothinkagile_vx_2u4n_firmwareMatch-

AND

lenovothinkagile_vx_2u4nMatch-

Node

lenovothinkagile_vx_4u_firmwareMatch-

AND

lenovothinkagile_vx_4uMatch-

Node

lenovothinkagile_vx1320_firmwareMatch-

AND

lenovothinkagile_vx1320Match-

Node

lenovothinkagile_vx2320_firmwareMatch-

AND

lenovothinkagile_vx2320Match-

Node

lenovothinkagile_vx3320_firmwareMatch-

AND

lenovothinkagile_vx3320Match-

Node

lenovothinkagile_vx3520-g_firmwareMatch-

AND

lenovothinkagile_vx3520-gMatch-

Node

lenovothinkagile_vx3720_firmwareMatch-

AND

lenovothinkagile_vx3720Match-

Node

lenovothinkagile_vx5520_firmwareMatch-

AND

lenovothinkagile_vx5520Match-

Node

lenovothinkagile_vx7320_n_firmwareMatch-

AND

lenovothinkagile_vx7320_nMatch-

Node

lenovothinkagile_vx7520_firmwareMatch-

AND

lenovothinkagile_vx7520Match-

Node

lenovothinkagile_vx7520_n_firmwareMatch-

AND

lenovothinkagile_vx7520_nMatch-

Node

lenovothinkagile_vx7820_firmwareMatch-

AND

lenovothinkagile_vx7820Match-

Node

lenovothinkedge_se450__firmwareMatch-

AND

lenovothinkedge_se450Match-

Node

lenovothinksystem_sd530_firmwareMatch-

AND

lenovothinksystem_sd530Match-

Node

lenovothinksystem_sd650_dwc_dual_node_tray_firmwareMatch-

AND

lenovothinksystem_sd650_dwc_dual_node_trayMatch-

Node

lenovothinksystem_sd650_dual_node_tray_firmwareMatch-

AND

lenovothinksystem_sd650_dual_node_trayMatch-

Node

lenovothinksystem_se350_firmwareMatch-

AND

lenovothinksystem_se350Match-

Node

lenovothinksystem_se350_firmwareMatch-

AND

lenovothinksystem_se350Match-

Node

lenovothinksystem_sn550_firmwareMatch-

AND

lenovothinksystem_sn550Match-

Node

lenovothinksystem_sn550_firmwareMatch-

AND

lenovothinksystem_sn550Match-

Node

lenovothinksystem_sn850_firmwareMatch-

AND

lenovothinksystem_sn850Match-

Node

lenovothinksystem_sn850_firmwareMatch-

AND

lenovothinksystem_sn850Match-

Node

lenovothinksystem_sr150_firmwareMatch-

AND

lenovothinksystem_sr150Match-

Node

lenovothinksystem_sr158_firmwareMatch-

AND

lenovothinksystem_sr158Match-

Node

lenovothinksystem_sr250_firmwareMatch-

AND

lenovothinksystem_sr250Match-

Node

lenovothinksystem_sr258_firmwareMatch-

AND

lenovothinksystem_sr258Match-

Node

lenovothinksystem_sr530_firmwareMatch-

AND

lenovothinksystem_sr530Match-

Node

lenovothinksystem_sr550_firmwareMatch-

AND

lenovothinksystem_sr550Match-

Node

lenovothinksystem_sr570_firmwareMatch-

AND

lenovothinksystem_sr570Match-

Node

lenovothinksystem_sr590_firmwareMatch-

AND

lenovothinkserver_sr590Match-

Node

lenovothinksystem_sr630_firmwareMatch-

AND

lenovothinksystem_sr630Match-

Node

lenovothinksystem_sr650_firmwareMatch-

AND

lenovothinksystem_sr650Match-

Node

lenovothinksystem_sr670_firmwareMatch-

AND

lenovothinksystem_sr670Match-

Node

lenovothinksystem_sr850_firmwareMatch-

AND

lenovothinksystem_sr850Match-

Node

lenovothinksystem_sr850_firmwareMatch-

AND

lenovothinksystem_sr850Match-

Node

lenovothinksystem_sr850p_firmwareMatch-

AND

lenovothinksystem_sr850pMatch-

Node

lenovothinksystem_sr860_firmwareMatch-

AND

lenovothinksystem_sr860Match-

Node

lenovothinksystem_sr860_firmwareMatch-

AND

lenovothinksystem_sr860Match-

Node

lenovothinksystem_sr950_firmwareMatch-

AND

lenovothinksystem_sr950Match-

Node

lenovothinksystem_st250_firmwareMatch-

AND

lenovothinksystem_st250Match-

Node

lenovothinksystem_st258_firmwareMatch-

AND

lenovothinksystem_st258Match-

Node

lenovothinksystem_st550_firmwareMatch-

AND

lenovothinksystem_st550Match-

CPENameOperatorVersion
lenovo:thinkagile_hx5530_firmwarelenovo thinkagile hx5530 firmwareeq-

CPE	Name	Operator	Version
lenovo:thinkagile_hx5530_firmware	lenovo thinkagile hx5530 firmware	eq	-

CNA Affected

[
  {
    "defaultStatus": "unaffected",
    "product": "Lenovo XClarity Controller (XCC)",
    "vendor": "Lenovo",
    "versions": [
      {
        "status": "affected",
        "version": "various"
      }
    ]
  }
]

References

support.lenovo.com/us/en/product_security/LEN-140960

8.8 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

8.4 High

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

19.3%

JSON

Related for CVE-2023-4607

cvelist1 prion1 nvd1