CVE-2024-38509 - A privilege escalation vulnerability was discovered in XCC that could allow an authenticated XCC use

CVE-2024-38509

Summary

A privilege escalation vulnerability was discovered in XCC that could allow an authenticated XCC user with elevated privileges to execute arbitrary code via a specially crafted IPMI command.

References

https://support.lenovo.com/us/en/product_security/LEN-156781

Vulnerable Configurations

CVSS

Base:	None
Impact:
Exploitability:

Access

Vector	Complexity	Authentication

Impact

Confidentiality	Integrity	Availability

Last major update

29-07-2024 - 14:12

Published

26-07-2024 - 20:15

Last modified

29-07-2024 - 14:12