CVE-2021-3956

🗓️ 18 May 2022 16:15:08Reported by [email protected]Type

nvd

nvd🔗 web.nvd.nist.gov👁 11 Views

A read-only authentication bypass vulnerability affecting Lenovo XClarity Controller (XCC) devices in LDAP Authentication Only Mod

Reporter	Title	Published	Views	Family All 9
Circl	CVE-2021-3956	19 May 202201:48	–	circl
CNNVD	Lenovo XClarity Controller 安全漏洞	14 Dec 202100:00	–	cnnvd
CVE	CVE-2021-3956	18 May 202216:10	–	cve
Cvelist	CVE-2021-3956	18 May 202216:10	–	cvelist
EUVD	EUVD-2021-27165	7 Oct 202500:30	–	euvd
Lenovo	Read-Only LDAP Authentication Bypass Vulnerability in Lenovo XClarity Controller (XCC) Firmware - Lenovo Support US	14 Dec 202117:07	–	lenovo
OSV	CVE-2021-3956	18 May 202216:15	–	osv
Prion	Authentication flaw	18 May 202216:15	–	prion
RedhatCVE	CVE-2021-3956	22 May 202521:28	–	redhatcve

NVD

Node

lenovo xclarity_controllerRange<7.22_cdi382o

AND

lenovo thinkagile_hx1320Match-

OR

lenovo thinkagile_hx1321Match-

OR

lenovo thinkagile_hx1520-rMatch-

OR

lenovo thinkagile_hx1521-rMatch-

OR

lenovo thinkagile_hx2320-eMatch-

OR

lenovo thinkagile_hx2321Match-

OR

lenovo thinkagile_hx3320Match-

OR

lenovo thinkagile_hx3321Match-

OR

lenovo thinkagile_hx3375Match-

OR

lenovo thinkagile_hx3376Match-

OR

lenovo thinkagile_hx3520-gMatch-

OR

lenovo thinkagile_hx3521-gMatch-

OR

lenovo thinkagile_hx5520Match-

OR

lenovo thinkagile_hx5520-cMatch-

OR

lenovo thinkagile_hx5521Match-

OR

lenovo thinkagile_hx5521-cMatch-

OR

lenovo thinkagile_hx7520Match-

OR

lenovo thinkagile_hx7521Match-

OR

lenovo thinkagile_vx2320Match-

OR

lenovo thinkagile_vx3320Match-

OR

lenovo thinkagile_vx3520-gMatch-

OR

lenovo thinkagile_vx5520Match-

OR

lenovo thinkagile_vx7320_nMatch-

OR

lenovo thinkagile_vx7520Match-

OR

lenovo thinkagile_vx7520_nMatch-

OR

lenovo thinkstation_p920Match-

OR

lenovo thinksystem_sr530Match-

OR

lenovo thinksystem_sr550Match-

OR

lenovo thinksystem_sr570Match-

OR

lenovo thinksystem_sr590Match-

OR

lenovo thinksystem_sr630Match-

OR

lenovo thinksystem_sr645Match-

OR

lenovo thinksystem_sr650Match-

OR

lenovo thinksystem_sr665Match-

OR

lenovo thinksystem_st550Match-

Node

lenovo xclarity_controllerRange<2.32_psi342n

AND

lenovo thinkagile_hx7820Match-

OR

lenovo thinkagile_hx7821Match-

OR

lenovo thinksystem_sr950Match-

Node

lenovo xclarity_controllerRange<3.41_tei382m

AND

lenovo thinkagile_mx1021Match-

OR

lenovo thinksystem_se350Match-

Node

lenovo xclarity_controllerRange<4.83_tei3c0n

AND

lenovo thinksystem_sd650Match-

OR

lenovo thinksystem_sn550Match-

OR

lenovo thinksystem_sn850Match-

OR

lenovo thinksystem_sr850Match-

OR

lenovo thinksystem_sr860Match-

Node

lenovo xclarity_controllerRange<1.51_tgbt24l

AND

lenovo thinksystem_sr850Match2.0

OR

lenovo thinksystem_sr860Match2.0

Source	Link
support	www.support.lenovo.com/us/en/product_security/LEN-72074

17 Jun 2026 04:06Current

CVSS 24.3

CVSS 3.14.3 - 5.3

EPSS0.00718

cve authentication bypass lenovo xclarity controller ldap authentication unauthenticated bind microsoft active directory