|
2023-10-25
|
CVE-2023-4607
|
An authenticated XCC user can change permissions for any user through a crafted API command.
|
Thinkagile_hx1021_edg_firmware, Thinkagile_hx1320_firmware, Thinkagile_hx1321_firmware, Thinkagile_hx1331_firmware, Thinkagile_hx1520\-R_firmware, Thinkagile_hx1521\-R_firmware, Thinkagile_hx2320\-E_firmware, Thinkagile_hx2321_firmware, Thinkagile_hx2330_firmware, Thinkagile_hx2331_firmware, Thinkagile_hx2720\-E_firmware, Thinkagile_hx3320_firmware, Thinkagile_hx3321_firmware, Thinkagile_hx3330_firmware, Thinkagile_hx3331_firmware, Thinkagile_hx3375_firmware, Thinkagile_hx3376_firmware, Thinkagile_hx3520\-G_firmware, Thinkagile_hx3521\-G_firmware, Thinkagile_hx3720_firmware, Thinkagile_hx3721_firmware, Thinkagile_hx5520\-C_firmware, Thinkagile_hx5520_firmware, Thinkagile_hx5521\-C_firmware, Thinkagile_hx5521_firmware, Thinkagile_hx5530_firmware, Thinkagile_hx5531_firmware, Thinkagile_hx7520_firmware, Thinkagile_hx7521_firmware, Thinkagile_hx7530_firmware, Thinkagile_hx7531_firmware, Thinkagile_hx7820_firmware, Thinkagile_hx7821_firmware, Thinkagile_hx_enclosure_firmware, Thinkagile_mx1021_on_se350_firmware, Thinkagile_mx3330\-F_all\-Flash_firmware, Thinkagile_mx3330\-H_hybrid_firmware, Thinkagile_mx3331\-F_all\-Flash_firmware, Thinkagile_mx3331\-H_hybrid_firmware, Thinkagile_mx3530\-H_hybrid_firmware, Thinkagile_mx3530_f_all_flash_firmware, Thinkagile_mx3531\-F_all\-Flash_firmware, Thinkagile_mx3531_h_hybrid_firmware, Thinkagile_mx630_v3_firmware, Thinkagile_mx630_v3_intergrated_system_firmware, Thinkagile_mx650_v3_firmware, Thinkagile_mx650_v3_intergrated_system_firmware, Thinkagile_mx_edge\-_mx1020__firmware, Thinkagile_vx1320_firmware, Thinkagile_vx2320_firmware, Thinkagile_vx2330_firmware, Thinkagile_vx3320_firmware, Thinkagile_vx3330_firmware, Thinkagile_vx3331_firmware, Thinkagile_vx3520\-G_firmware, Thinkagile_vx3530\-G_firmware, Thinkagile_vx3720_firmware, Thinkagile_vx5520_firmware, Thinkagile_vx5530_firmware, Thinkagile_vx7320_n_firmware, Thinkagile_vx7330_firmware, Thinkagile_vx7520_firmware, Thinkagile_vx7520_n_firmware, Thinkagile_vx7530_firmware, Thinkagile_vx7531_firmware, Thinkagile_vx7820_firmware, Thinkagile_vx_1se_firmware, Thinkagile_vx_2u4n_firmware, Thinkagile_vx_4u_firmware, Thinkedge_se450__firmware, Thinksystem_sd530_firmware, Thinksystem_sd630_v2_firmware, Thinksystem_sd650\-N_v2_firmware, Thinksystem_sd650_dual_node_tray_firmware, Thinksystem_sd650_dwc_dual_node_tray_firmware, Thinksystem_sd650_v2_firmware, Thinksystem_sd650_v3_firmware, Thinksystem_sd665_v3_firmware, Thinksystem_se350_firmware, Thinksystem_sn550_firmware, Thinksystem_sn550_v2_firmware, Thinksystem_sn850_firmware, Thinksystem_sr150_firmware, Thinksystem_sr158_firmware, Thinksystem_sr250_firmware, Thinksystem_sr258_firmware, Thinksystem_sr258_v2_firmware, Thinksystem_sr530_firmware, Thinksystem_sr550_firmware, Thinksystem_sr570_firmware, Thinksystem_sr590_firmware, Thinksystem_sr630_firmware, Thinksystem_sr630_v2_firmware, Thinksystem_sr630_v3_firmware, Thinksystem_sr635_v3_firmware, Thinksystem_sr645_firmware, Thinksystem_sr645_v3_firmware, Thinksystem_sr650_firmware, Thinksystem_sr650_v2_firmware, Thinksystem_sr650_v3_firmware, Thinksystem_sr655_v3_firmware, Thinksystem_sr665_firmware, Thinksystem_sr665_v3_firmware, Thinksystem_sr670_firmware, Thinksystem_sr670_v2_firmware, Thinksystem_sr675_v3_firmware, Thinksystem_sr850_firmware, Thinksystem_sr850_v2_firmware, Thinksystem_sr850_v3_firmware, Thinksystem_sr850p_firmware, Thinksystem_sr860_firmware, Thinksystem_sr860_v2_firmware, Thinksystem_sr860_v3_firmware, Thinksystem_sr950_firmware, Thinksystem_st250_firmware, Thinksystem_st250_v2_firmware, Thinksystem_st258_firmware, Thinksystem_st258_v2_firmware, Thinksystem_st550_firmware, Thinksystem_st650_v2_firmware, Thinksystem_st650_v3_firmware, Thinksystem_st658_v2_firmware, Thinksystem_st658_v3_firmware
|
8.8
|
|
|
|
2023-10-25
|
CVE-2023-4606
|
An authenticated XCC user with Read-Only permission can change a different user’s password through a crafted API command.
This affects ThinkSystem v2 and v3 servers with XCC; ThinkSystem v1 servers are not affected.
|
Thinkagile_hx1331_firmware, Thinkagile_hx2330_firmware, Thinkagile_hx2331_firmware, Thinkagile_hx3330_firmware, Thinkagile_hx3331_firmware, Thinkagile_hx3375_firmware, Thinkagile_hx3376_firmware, Thinkagile_hx5530_firmware, Thinkagile_hx5531_firmware, Thinkagile_hx7530_firmware, Thinkagile_hx7531_firmware, Thinkagile_mx3330\-F_all\-Flash_firmware, Thinkagile_mx3330\-H_hybrid_firmware, Thinkagile_mx3331\-F_all\-Flash_firmware, Thinkagile_mx3331\-H_hybrid_firmware, Thinkagile_mx3530\-H_hybrid_firmware, Thinkagile_mx3530_f_all_flash_firmware, Thinkagile_mx3531\-F_all\-Flash_firmware, Thinkagile_mx3531_h_hybrid_firmware, Thinkagile_vx2330_firmware, Thinkagile_vx3330_firmware, Thinkagile_vx3331_firmware, Thinkagile_vx3530\-G_firmware, Thinkagile_vx5530_firmware, Thinkagile_vx7330_firmware, Thinkagile_vx7530_firmware, Thinkagile_vx7531_firmware, Thinksystem_sd630_v2_firmware, Thinksystem_sd650\-N_v2_firmware, Thinksystem_sd650_v2_firmware, Thinksystem_sd650_v3_firmware, Thinksystem_sd665_v3_firmware, Thinksystem_sn550_v2_firmware, Thinksystem_sr250_firmware, Thinksystem_sr258_v2_firmware, Thinksystem_sr630_v2_firmware, Thinksystem_sr630_v3_firmware, Thinksystem_sr635_v3_firmware, Thinksystem_sr645_firmware, Thinksystem_sr645_v3_firmware, Thinksystem_sr650_v2_firmware, Thinksystem_sr650_v3_firmware, Thinksystem_sr655_v3_firmware, Thinksystem_sr665_firmware, Thinksystem_sr665_v3_firmware, Thinksystem_sr670_firmware, Thinksystem_sr670_v2_firmware, Thinksystem_sr675_v3_firmware, Thinksystem_sr850_v2_firmware, Thinksystem_sr850_v3_firmware, Thinksystem_sr860_v2_firmware, Thinksystem_sr860_v3_firmware, Thinksystem_st250_v2_firmware, Thinksystem_st258_v2_firmware, Thinksystem_st650_v2_firmware, Thinksystem_st650_v3_firmware, Thinksystem_st658_v2_firmware, Thinksystem_st658_v3_firmware
|
8.1
|
|
|
|
2023-10-25
|
CVE-2023-4608
|
An authenticated XCC user with elevated privileges can perform blind SQL injection in limited cases through a crafted API command.
This affects ThinkSystem v2 and v3 servers with XCC; ThinkSystem v1 servers are not affected.
|
Thinkagile_hx1331_firmware, Thinkagile_hx2330_firmware, Thinkagile_hx2331_firmware, Thinkagile_hx3330_firmware, Thinkagile_hx3331_firmware, Thinkagile_hx3375_firmware, Thinkagile_hx3376_firmware, Thinkagile_hx5530_firmware, Thinkagile_hx5531_firmware, Thinkagile_hx7530_firmware, Thinkagile_hx7531_firmware, Thinkagile_mx3330\-F_all\-Flash_firmware, Thinkagile_mx3330\-H_hybrid_firmware, Thinkagile_mx3331\-F_all\-Flash_firmware, Thinkagile_mx3331\-H_hybrid_firmware, Thinkagile_mx3530\-H_hybrid_firmware, Thinkagile_mx3530_f_all_flash_firmware, Thinkagile_mx3531\-F_all\-Flash_firmware, Thinkagile_mx3531_h_hybrid_firmware, Thinkagile_vx2330_firmware, Thinkagile_vx3330_firmware, Thinkagile_vx3331_firmware, Thinkagile_vx3530\-G_firmware, Thinkagile_vx5530_firmware, Thinkagile_vx7330_firmware, Thinkagile_vx7530_firmware, Thinkagile_vx7531_firmware, Thinksystem_sd630_v2_firmware, Thinksystem_sd650\-N_v2_firmware, Thinksystem_sd650_v2_firmware, Thinksystem_sd650_v3_firmware, Thinksystem_sd665_v3_firmware, Thinksystem_sn550_v2_firmware, Thinksystem_sr250_firmware, Thinksystem_sr258_v2_firmware, Thinksystem_sr630_v2_firmware, Thinksystem_sr630_v3_firmware, Thinksystem_sr635_v3_firmware, Thinksystem_sr645_firmware, Thinksystem_sr645_v3_firmware, Thinksystem_sr650_v2_firmware, Thinksystem_sr650_v3_firmware, Thinksystem_sr655_v3_firmware, Thinksystem_sr665_firmware, Thinksystem_sr665_v3_firmware, Thinksystem_sr670_firmware, Thinksystem_sr670_v2_firmware, Thinksystem_sr675_v3_firmware, Thinksystem_sr850_v2_firmware, Thinksystem_sr850_v3_firmware, Thinksystem_sr860_v2_firmware, Thinksystem_sr860_v3_firmware, Thinksystem_st250_v2_firmware, Thinksystem_st258_v2_firmware, Thinksystem_st650_v2_firmware, Thinksystem_st650_v3_firmware, Thinksystem_st658_v2_firmware, Thinksystem_st658_v3_firmware
|
7.2
|
|
|
|
2023-01-30
|
CVE-2022-40137
|
A buffer overflow in the WMI SMI Handler in some Lenovo models may allow an attacker with local access and elevated privileges to execute arbitrary code.
|
Ideacentre_3\-07ada05_firmware, Ideacentre_3\-07imb05_firmware, Ideacentre_3_07iab7_firmware, Ideacentre_510\-15ick_firmware, Ideacentre_510a\-15arr_firmware, Ideacentre_510a\-15ick_firmware, Ideacentre_510s\-07icb_firmware, Ideacentre_510s\-07ick_firmware, Ideacentre_5\-14acn6_firmware, Ideacentre_5\-14are05_firmware, Ideacentre_5\-14imb05_firmware, Ideacentre_5\-14iob6_firmware, Ideacentre_5_14iab7_firmware, Ideacentre_720\-18apr_firmware, Ideacentre_a340\-22ast_all\-In\-One_firmware, Ideacentre_a340\-22icb_all\-In\-One_firmware, Ideacentre_a340\-22ick_all\-In\-One_firmware, Ideacentre_a340\-22igm_all\-In\-One_firmware, Ideacentre_a340\-22iwl_all\-In\-One_firmware, Ideacentre_a340\-24icb_all\-In\-One_firmware, Ideacentre_a340\-24ick_all\-In\-One_firmware, Ideacentre_a340\-24igm_all\-In\-One_firmware, Ideacentre_a340\-24iwl_all\-In\-One_firmware, Ideacentre_aio_3\-22ada05_firmware, Ideacentre_aio_3\-22ada6_firmware, Ideacentre_aio_3\-22iil5_firmware, Ideacentre_aio_3\-22imb05_firmware, Ideacentre_aio_3\-22itl6_firmware, Ideacentre_aio_3\-24ada6_firmware, Ideacentre_aio_3\-24alc6_firmware, Ideacentre_aio_3\-24are05_firmware, Ideacentre_aio_3\-24iil5_firmware, Ideacentre_aio_3\-24imb05_firmware, Ideacentre_aio_3\-24itl6_firmware, Ideacentre_aio_3\-27alc6_firmware, Ideacentre_aio_3\-27imb05_firmware, Ideacentre_aio_3\-27itl6_firmware, Ideacentre_c5\-14imb05_firmware, Ideacentre_e96z_firmware, Ideacentre_g5\-14amr05_firmware, Ideacentre_g5\-14imb05_firmware, Ideacentre_gaming_5\-14acn6_firmware, Ideacentre_gaming_5\-14iob6_firmware, Ideacentre_gaming_5_17acn7_firmware, Ideacentre_gaming_5_17iab7_firmware, Ideacentre_m60e_tiny_firmware, Ideacentre_m625q_firmware, Ideacentre_m630e_firmware, Ideacentre_m700_tiny_firmware, Ideacentre_m70a_firmware, Ideacentre_m70a_gen_2_firmware, Ideacentre_m70a_gen_3_firmware, Ideacentre_m70c_firmware, Ideacentre_m70q_firmware, Ideacentre_m70q_gen_2_firmware, Ideacentre_m70q_gen_3_firmware, Ideacentre_m70s_firmware, Ideacentre_m70s_gen_3_firmware, Ideacentre_m70t_firmware, Ideacentre_m70t_gen_3_firmware, Ideacentre_m710e_firmware, Ideacentre_m710q_firmware, Ideacentre_m710s_firmware, Ideacentre_m710t_firmware, Ideacentre_m715q_2nd_gen_firmware, Ideacentre_m715q_firmware, Ideacentre_m715s_firmware, Ideacentre_m715t_firmware, Ideacentre_m720e_firmware, Ideacentre_m720q_firmware, Ideacentre_m720s_firmware, Ideacentre_m720t_firmware, Ideacentre_m725s_firmware, Ideacentre_m75n_firmware, Ideacentre_m75q\-1_firmware, Ideacentre_m75q_gen_2_firmware, Ideacentre_m75s\-1_firmware, Ideacentre_m75s_gen_2_firmware, Ideacentre_m75t_gen_2_firmware, Ideacentre_m800_firmware, Ideacentre_m80q_firmware, Ideacentre_m80q_gen_3_firmware, Ideacentre_m80s_firmware, Ideacentre_m80s_gen_3_firmware, Ideacentre_m80t_firmware, Ideacentre_m80t_gen_3_firmware, Ideacentre_m810z_all\-In\-One_firmware, Ideacentre_m818z_firmware, Ideacentre_m820z_all\-In\-One_firmware, Ideacentre_m900_firmware, Ideacentre_m900x_firmware, Ideacentre_m90a_firmware, Ideacentre_m90a_gen_2_firmware, Ideacentre_m90a_gen_3_firmware, Ideacentre_m90q_gen_2_firmware, Ideacentre_m90q_gen_3_firmware, Ideacentre_m90q_tiny_firmware, Ideacentre_m90s_firmware, Ideacentre_m90s_gen_3_firmware, Ideacentre_m90t_firmware, Ideacentre_m90t_gen_3_firmware, Ideacentre_m910q_firmware, Ideacentre_m910s_firmware, Ideacentre_m910t_firmware, Ideacentre_m910x_firmware, Ideacentre_m920q_firmware, Ideacentre_m920s_firmware, Ideacentre_m920t_firmware, Ideacentre_m920x_firmware, Ideacentre_mini_5\-01imh05_firmware, Ideacentre_neo_50s_gen_3_firmware, Ideacentre_neo_50t_gen_3_firmware, Ideacentre_neo_70t_gen_3_firmware, Ideacentre_t540\-15ama_g_firmware, Ideacentre_t540\-15ick_firmware, Legion_c530\-19icb_firmware, Legion_t530\-28apr_firmware, Legion_t530\-28icb_firmware, Legion_t5\-26iob6_firmware, Legion_t5\-28icb05_firmware, Legion_t7\-34imz5_firmware, N3310_storage_firmware, N4610_storage_firmware, Qitian_a815_firmware, Qt_b415_firmware, Qt_m410_firmware, Qt_m415_firmware, Thinkagile_hx1021_edg_firmware, Thinkagile_hx1320_firmware, Thinkagile_hx1321_firmware, Thinkagile_hx1331_firmware, Thinkagile_hx1520\-R_firmware, Thinkagile_hx1521\-R_firmware, Thinkagile_hx2320\-E_firmware, Thinkagile_hx2320_firmware, Thinkagile_hx2321_firmware, Thinkagile_hx2330_firmware, Thinkagile_hx2331_firmware, Thinkagile_hx2720\-E_firmware, Thinkagile_hx3320_firmware, Thinkagile_hx3321_firmware, Thinkagile_hx3330_firmware, Thinkagile_hx3331_firmware, Thinkagile_hx3375_firmware, Thinkagile_hx3376_firmware, Thinkagile_hx3520\-G_firmware, Thinkagile_hx3521\-G_firmware, Thinkagile_hx3720_firmware, Thinkagile_hx3721_firmware, Thinkagile_hx5520\-C_firmware, Thinkagile_hx5520_firmware, Thinkagile_hx5521\-C_firmware, Thinkagile_hx5521_firmware, Thinkagile_hx5530_firmware, Thinkagile_hx5531_firmware, Thinkagile_hx7520_firmware, Thinkagile_hx7521_firmware, Thinkagile_hx7530_firmware, Thinkagile_hx7531_firmware, Thinkagile_hx7820_firmware, Thinkagile_hx7821_firmware, Thinkagile_mx1021_firmware, Thinkagile_mx3330\-F_all\-Flash_firmware, Thinkagile_mx3330\-H_hybrid_firmware, Thinkagile_mx3331\-F_all\-Flash_firmware, Thinkagile_mx3331\-H_hybrid_firmware, Thinkagile_mx3520_f\-_all_flash__firmware, Thinkagile_mx3520_h\-_hybrid__firmware, Thinkagile_mx3530\-H_hybrid_firmware, Thinkagile_mx3530_f_all_flash_firmware, Thinkagile_mx3531\-F_all\-Flash_firmware, Thinkagile_mx3531_h_hybrid_firmware, Thinkagile_mx\-_all_flash_firmware, Thinkagile_mx\-_hybrid_firmware, Thinkagile_mx_1u_\-_mx3321_f__firmware, Thinkagile_mx_1u_\-_mx3321_h__firmware, Thinkagile_mx_edge\-_mx1020__firmware, Thinkagile_vx1320__firmware, Thinkagile_vx2320__firmware, Thinkagile_vx2330_firmware, Thinkagile_vx3320__firmware, Thinkagile_vx3330_firmware, Thinkagile_vx3331_firmware, Thinkagile_vx3520\-G__firmware, Thinkagile_vx3530\-G_firmware, Thinkagile_vx3720__firmware, Thinkagile_vx5520__firmware, Thinkagile_vx5530_firmware, Thinkagile_vx7320_n__firmware, Thinkagile_vx7330_firmware, Thinkagile_vx7520__firmware, Thinkagile_vx7520_n__firmware, Thinkagile_vx7530_firmware, Thinkagile_vx7531_firmware, Thinkagile_vx7820__firmware, Thinkagile_vx_1se_firmware, Thinkagile_vx_1u_firmware, Thinkagile_vx_2u4n_firmware, Thinkagile_vx_2u_firmware, Thinkagile_vx_4u_firmware, Thinkcentre_e75s_firmware, Thinkcentre_e75t_firmware, Thinkcentre_m610_firmware, Thinkcentre_m6600q_firmware, Thinkcentre_m6600s_firmware, Thinkcentre_m6600t_firmware, Thinkcentre_m700q_firmware, Thinkcentre_m8600s_firmware, Thinkcentre_m8600t_firmware, Thinkedge_se30_firmware, Thinkserver_rd350_firmware, Thinkserver_rd350g_firmware, Thinkserver_rd450_firmware, Thinkserver_rd550_firmware, Thinkserver_rd650_firmware, Thinkserver_rs160_firmware, Thinkserver_rs260_firmware, Thinkserver_sd350_firmware, Thinkserver_sr588_firmware, Thinkserver_sr590_firmware, Thinkserver_sr860p_firmware, Thinkserver_td350_firmware, Thinkserver_ts150_firmware, Thinkserver_ts250_firmware, Thinkserver_ts450_firmware, Thinkserver_ts460_firmware, Thinkserver_ts550_firmware, Thinkserver_ts560_firmware, Thinksmart_core_\&_controller_full_room_kit\:_microsoft_teams_rooms_firmware, Thinksmart_core_\&_controller_full_room_kit\:_zoom_rooms_firmware, Thinksmart_core_\&_controller_kit\:_microsoft_teams_rooms_firmware, Thinksmart_core_\&_controller_kit\:_zoom_rooms_firmware, Thinksmart_core_device\:_zoom_rooms_firmware, Thinksmart_core_device_for_logitech_firmware, Thinksmart_core_device_for_poly_firmware, Thinksmart_hub_500_firmware, Thinksmart_hub_teams_firmware, Thinksmart_hub_zoom_firmware, Thinkstation_p310_workstation_firmware, Thinkstation_p320_tiny_workstation_firmware, Thinkstation_p320_workstation_firmware, Thinkstation_p330_tiny_workstation_firmware, Thinkstation_p330_workstation_2nd_gen_firmware, Thinkstation_p330_workstation_firmware, Thinkstation_p340_tiny_workstation_firmware, Thinkstation_p340_workstation_firmware, Thinkstation_p348_workstation_firmware, Thinkstation_p350_tiny_workstation_firmware, Thinkstation_p350_workstation_firmware, Thinkstation_p360_tiny_workstation_firmware, Thinkstation_p520_workstation_firmware, Thinkstation_p520c_workstation_firmware, Thinkstation_p620_workstation_firmware, Thinkstation_p720_workstation_firmware, Thinkstation_p920_workstation_firmware, Thinkstation_stadia_ggp\-120_firmware, Thinkstation_thinkstation_p318_firmware, Thinksystem_dx1100u_firmware, Thinksystem_dx8200d_firmware, Thinksystem_hr610x_firmware, Thinksystem_hr630x_firmware, Thinksystem_hr650x_firmware, Thinksystem_st50_firmware, Thinksystem_st58_firmware, V30a\-22iml_firmware, V30a\-24iml_firmware, V330\-20icb_all\-In\-One_firmware, V35s\-07ada_firmware, V50a\-22imb_firmware, V50a\-24imb_firmware, V50s\-07imb_firmware, V50t\-13imb_firmware, V50t\-13iob_g2_firmware, V520_firmware, V520s_firmware, V530\-15arr_firmware, V530\-15icb_firmware, V530\-15icr_firmware, V530\-22icb_all\-In\-One_firmware, V530\-24icb_all\-In\-One_firmware, V530s\-07icb_firmware, V530s\-07icr_firmware, V540\-24iwl_all\-In\-One_firmware, V55t\-15api_firmware, V55t\-15are_firmware, V55t_gen_2_13acn_firmware, Yangtian_afq150_firmware, Yoga_a940\-27icb_all\-In\-One_firmware, Yta8900f_firmware
|
6.7
|
|
|