Vulnerability-Lookup

BDU:2025-00187 (CVE-2024-38512)

Vulnerability from fstec – Published: 2025-01-13 – Updated: 2025-01-19 – View on bdu.fstec.ru Fixed

Title

Уязвимость контроллера Lenovo XClarity Controller (XCC) для серверов Lenovo ThinkSystem, позволяющая нарушителю выполнить произвольные команды

Summary

Уязвимость контроллера Lenovo XClarity Controller (XCC) для серверов Lenovo ThinkSystem связана с непринятием мер по нейтрализации специальных элементов. Эксплуатация уязвимости может позволить нарушителю, действующему удалённо, выполнить произвольные команды с помощью специально созданной команды IPMI

Severity

9.0 (High) CVSS 2.0


                      
                        AV:N/AC:L/Au:S/C:C/I:C/A:C

7.2 (High) CVSS 3.0


                      
                        CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H

Class

Code vulnerability

Status

Confirmed by the vendor

Exploitation

Injection

Incidents

Being clarified

Remediation

Software update

CWE

CWE-78 - Непринятие мер по нейтрализации специальных элементов, используемых в команде операционной системы (Внедрение в команду операционной системы)

Aliases

CVE-2024-38512, LEN-156781

References

1 reference

URL
https://support.lenovo.com/vn/en/product_security/ps500634-lenovo-xclarity-cont…

Impacted products

134 products from 1 vendor

Vendors

Lenovo Group Limited

Products

HX5530 Appliance (ThinkAgile), HX7530 Appl for SAP HANA (ThinkAgile), VX3331 Certified Node (ThinkAgile), HX Enclosure Certified Node, HX1021 Edge Certified Node 3yr, HX1320 Appliance, HX1321 Certified Node, HX1331 Certified Node (ThinkAgile), HX1520-R Appliance, HX1521-R Certified Node, HX2320-E Appliance, HX2321 Certified Node, HX2330 Appliance (ThinkAgile), HX2331 Certified Node (ThinkAgile), HX2720-E Appliance, HX3320 Appliance, HX3321 Certified Node, HX3330 Appliance (ThinkAgile), HX3331 Certified Node (ThinkAgile), HX3331 Node SAP HANA (ThinkAgile), HX3375 Appliance, HX3376 Certified Node, HX3520-G Appliance, HX3521-G Certified Node, HX3720 Appliance, HX3721 Certified Node, HX5520 Appliance, HX5520-C Appliance, HX5521 Certified Node, HX5521-C Certified Node, HX5531 Certified Node (ThinkAgile), HX7520 Appliance, HX7521 Certified Node, VX7531 Certified Node, HX7531 Node SAP HANA (ThinkAgile), HX7820 Appliance, HX7821 Certified Node, MX Edge Appliance - MX1020, MX3330-F All-flash Appliance (ThinkAgile), MX3330-H Hybrid Appliance (ThinkAgile), MX3331-F All-flash Certified node (ThinkAgile), MX3331-H Hybrid Certified node (ThinkAgile), MX3530 F All flash Appliance (ThinkAgile), MX3530-H Hybrid Appliance (ThinkAgile), MX3531 H Hybrid Certified node (ThinkAgile), ThinkAgile MX1021 on SE350, VX 1SE Certified Node, VX 2U4N Certified Node, VX2320, VX2330 Appliance (ThinkAgile), VX3320, VX3330 Appliance (ThinkAgile), VX3520-G, VX3530-G Appliance (ThinkAgile), VX3720, VX5520, VX5530 Appliance (ThinkAgile), VX635 V3 Integrated System (ThinkAgile), VX645 V3 Certified Node (ThinkAgile), VX655 V3 Certified Node (ThinkAgile), VX655 V3 Integrated System (ThinkAgile), VX645 V3 Integrated System (ThinkAgile), VX665 V3 Certified Node (ThinkAgile), VX665 V3 Integrated System (ThinkAgile), VX7320 N, VX7330 Appliance (Thinkagile), VX7520, VX7520 N, VX7530 Appliance (ThinkAgile), VX7531 Certified Node (ThinkAgile), VX7820, SE350 V2 (ThinkEdge), SE360 V2 (ThinkEdge), SE450, SE455 V3 (ThinkEdge), P920 Rack Workstation, ST250 V3 (ThinkSystem), SD530, SD630 V2 (ThinkSystem), SD650 DWC Dual Node Tray, SD650 V2 (ThinkSystem), SD650 V3 (ThinkSystem), SD650-N V2 (ThinkSystem), SD665 V3 (ThinkSystem), SE350, SN550, SN550 V2 (ThinkSystem), SN850, SR150, SR158, SR250, SR250 V2, SR258, SR258 V2, SR258 V3 (ThinkSystem), SR530, SR550, SR570, SR590, SR630, SR630 V2 (ThinkSystem), SR630 V3 (ThinkSystem), SR635 V3 (ThinkSystem), SR645, SR645 V3 (ThinkSystem), SR650, SR650 V2 (ThinkSystem), SR650 V3 (ThinkSystem), SR655 V3 (ThinkSystem), SR655, SR665, SR665 V3 (ThinkSystem), SR670, SR670 V2 (ThinkSystem), SR675 V3 (ThinkSystem), SR850, SR850 V2 (ThinkSystem), SR850 V3 (ThinkSystem), SR850P, SR860, SR860 V2 (ThinkSystem), Lenovo ThinkSystem SR860 V3, SR950, SR950 V3 (ThinkSystem), ST250, ST250 V2, ST258, ST258 V2, ST258 V3 (ThinkSystem), ST550, ST650 V2 (ThinkSystem), ST650 V3 (ThinkSystem), ST658 V2 (ThinkSystem), Lenovo ThinkSystem ST658 V3

Versions

до 4.71 (HX5530 Appliance (ThinkAgile)), до 4.71 (HX7530 Appl for SAP HANA (ThinkAgile)), до 4.71 (VX3331 Certified Node (ThinkAgile)), до 4.11 TGBT50C (HX Enclosure Certified Node), до 4.11 TEI3E4A (HX1021 Edge Certified Node 3yr), до 9.97 CDI3B4B (HX1320 Appliance), до 9.97 CDI3B4B (HX1321 Certified Node), до 4.71 (HX1331 Certified Node (ThinkAgile)), до 9.97 CDI3B4B (HX1520-R Appliance), до 9.97 CDI3B4B (HX1521-R Certified Node), до 9.97 CDI3B4B (HX2320-E Appliance), до 9.97 CDI3B4B (HX2321 Certified Node), до 4.71 (HX2330 Appliance (ThinkAgile)), до 4.71 (HX2331 Certified Node (ThinkAgile)), до 4.11 TGBT50C (HX2720-E Appliance), до 9.97 CDI3B4B (HX3320 Appliance), до 9.97 CDI3B4B (HX3321 Certified Node), до 4.71 (HX3330 Appliance (ThinkAgile)), до 4.71 (HX3331 Certified Node (ThinkAgile)), до 4.71 (HX3331 Node SAP HANA (ThinkAgile)), до 5.61 D8BT64D (HX3375 Appliance), до 5.61 D8BT64D (HX3376 Certified Node), до 9.97 CDI3B4B (HX3520-G Appliance), до 9.97 CDI3B4B (HX3521-G Certified Node), до 4.11 TGBT50C (HX3720 Appliance), до 4.11 TGBT50C (HX3721 Certified Node), до 9.97 CDI3B4B (HX5520 Appliance), до 9.97 CDI3B4B (HX5520-C Appliance), до 9.97 CDI3B4B (HX5521 Certified Node), до 9.97 CDI3B4B (HX5521-C Certified Node), до 4.71 (HX5531 Certified Node (ThinkAgile)), до 9.97 CDI3B4B (HX7520 Appliance), до 9.97 CDI3B4B (HX7521 Certified Node), до 4.71 (VX7531 Certified Node), до 4.71 (HX7531 Node SAP HANA (ThinkAgile)), до 3.11 PSI354A (HX7820 Appliance), до 3.11 PSI354A (HX7821 Certified Node), до 4.11 TEI3E4A (MX Edge Appliance - MX1020), до 4.71 (MX3330-F All-flash Appliance (ThinkAgile)), до 4.71 (MX3330-H Hybrid Appliance (ThinkAgile)), до 4.71 (MX3331-F All-flash Certified node (ThinkAgile)), до 4.71 (MX3331-H Hybrid Certified node (ThinkAgile)), до 4.71 (MX3530 F All flash Appliance (ThinkAgile)), до 4.71 (MX3530-H Hybrid Appliance (ThinkAgile)), до 4.71 (MX3531 H Hybrid Certified node (ThinkAgile)), до 4.11 TEI3E4A (ThinkAgile MX1021 on SE350), до 4.11 TGBT50C (VX 1SE Certified Node), до 4.11 TGBT50C (VX 2U4N Certified Node), до 4.11 TGBT50C (HX1320 Appliance), до 9.97 CDI3B4B (VX2320), до 4.71 (VX2330 Appliance (ThinkAgile)), до 9.97 CDI3B4B (VX3320), до 4.71 (VX3330 Appliance (ThinkAgile)), до 9.97 CDI3B4B (VX3520-G), до 4.71 (VX3530-G Appliance (ThinkAgile)), до 4.11 TGBT50C (VX3720), до 9.97 CDI3B4B (VX5520), до 4.71 (VX5530 Appliance (ThinkAgile)), до 2.81 KAX330B (VX635 V3 Integrated System (ThinkAgile)), до 2.81 KAX330B (VX645 V3 Certified Node (ThinkAgile)), до 2.81 KAX330B (VX655 V3 Certified Node (ThinkAgile)), до 2.81 KAX330B (VX655 V3 Integrated System (ThinkAgile)), до 2.81 KAX330B (VX645 V3 Integrated System (ThinkAgile)), до 2.81 KAX330B (VX665 V3 Certified Node (ThinkAgile)), до 2.81 KAX330B (VX665 V3 Integrated System (ThinkAgile)), до 9.97 CDI3B4B (VX7320 N), до 4.71 (VX7330 Appliance (Thinkagile)), до 9.97 CDI3B4B (VX7520), до 9.97 CDI3B4B (VX7520 N), до 4.71 (VX7530 Appliance (ThinkAgile)), до 4.71 (VX7531 Certified Node (ThinkAgile)), до 3.11 PSI354A (VX7820), до 2.12 IYX324F (SE350 V2 (ThinkEdge)), до 2.12 IYX324F (SE360 V2 (ThinkEdge)), до 3.11 USX332X (SE450), до 2.12 MBX306K (SE455 V3 (ThinkEdge)), до 9.97 CDI3B4B (P920 Rack Workstation), до 1.12 CTX304D (ST250 V3 (ThinkSystem)), до 4.11 TGBT50C (SD530), до 4.11 TGBT50C (SD630 V2 (ThinkSystem)), до 6.36 TEI3F4A (SD650 DWC Dual Node Tray), до 4.11 TGBT50C (SD650 DWC Dual Node Tray), до 4.11 TGBT50C (SD650 V2 (ThinkSystem)), до 4.11 USX342E (SD650 V3 (ThinkSystem)), до 4.11 TGBT50C (SD650-N V2 (ThinkSystem)), до 5.11 QGX330E (SD665 V3 (ThinkSystem)), до 4.11 TEI3E4A (SE350), до 6.36 TEI3F4A (SN550), до 4.11 TGBT50C (SN550), до 4.11 TGBT50C (SN550 V2 (ThinkSystem)), до 6.36 TEI3F4A (SN850), до 4.11 TGBT50C (SN850), до 4.11 TGBT50C (SR150), до 4.11 TGBT50C (SR158), до 4.11 TGBT50C (SR250), до 4.11 TGBT50C (SR250 V2), до 4.11 TGBT50C (SR258), до 4.11 TGBT50C (SR258 V2), до 4.12 CTX304D (SR258 V3 (ThinkSystem)), до 9.97 CDI3B4B (SR530), до 9.97 CDI3B4B (SR550), до 9.97 CDI3B4B (SR570), до 9.97 CDI3B4B (SR590), до 9.97 CDI3B4B (SR630), до 4.71 (SR630 V2 (ThinkSystem)), до 4.51 ESX328B (SR630 V3 (ThinkSystem)), до 2.81 KAX330B (SR635 V3 (ThinkSystem)), до 5.61 D8BT64D (SR645), до 5.61 D8BT64D (SR645 V3 (ThinkSystem)), до 2.81 KAX330B (SR645 V3 (ThinkSystem)), до 9.97 CDI3B4B (SR650), до 4.71 (SR650 V2 (ThinkSystem)), до 4.51 ESX328B (SR650 V2 (ThinkSystem)), до 4.51 ESX328B (SR650 V3 (ThinkSystem)), до 2.81 KAX330B (SR655 V3 (ThinkSystem)), до 5.61 D8BT64D (SR655), до 5.61 D8BT64D (SR665), до 5.61 D8BT64D (SR665 V3 (ThinkSystem)), до 2.81 KAX330B (SR665 V3 (ThinkSystem)), до 4.11 TEI3E4A (SR670), до 4.11 TGBT50C (SR670 V2 (ThinkSystem)), до 5.11 QGX336E (SR675 V3 (ThinkSystem)), до 6.36 TEI3F4A (SR850), до 4.11 TGBT50C (SR850), до 4.11 TGBT50C (SR850 V2 (ThinkSystem)), до 1.20 USX352D (SR850 V3 (ThinkSystem)), до 4.11 TEI3E4A (SR850P), до 6.36 TEI3F4A (SR860), до 4.11 TGBT50C (SR860), до 4.11 TGBT50C (SR860 V2 (ThinkSystem)), до 1.20 USX352D (Lenovo ThinkSystem SR860 V3), до 3.11 PSI354A (SR950), до 2.11 EBE106H (SR950 V3 (ThinkSystem)), до 4.11 TGBT50C (ST250), до 4.11 TGBT50C (ST250 V2), до 4.11 TGBT50C (ST258), до 4.11 TGBT50C (ST258 V2), до 1.12 CTX304D (ST258 V3 (ThinkSystem)), до 9.97 CDI3B4B (ST550), до 4.11 TGBT50C (ST650 V2 (ThinkSystem)), до 4.11 USX342E (ST650 V3 (ThinkSystem)), до 4.11 TGBT50C (ST658 V2 (ThinkSystem)), до 4.11 USX342E (Lenovo ThinkSystem ST658 V3)

Product types

Firmware, Appliance software, Network device, Network appliance software

Mitigations

Использование рекомендаций: https://support.lenovo.com/vn/en/product_security/ps500634-lenovo-xclarity-controller-xcc-vulnerabilities

JSON

To clipboard

{
  "CVSS 2.0": "AV:N/AC:L/Au:S/C:C/I:C/A:C",
  "CVSS 3.0": "AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H",
  "CVSS 4.0": null,
  "remediation_\u0418\u0434\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0442\u043e\u0440": null,
  "remediation_\u041d\u0430\u0438\u043c\u0435\u043d\u043e\u0432\u0430\u043d\u0438\u0435": null,
  "\u0412\u0435\u043d\u0434\u043e\u0440 \u041f\u041e": "Lenovo Group Limited",
  "\u0412\u0435\u0440\u0441\u0438\u044f \u041f\u041e": "\u0434\u043e 4.71 (HX5530 Appliance (ThinkAgile)), \u0434\u043e 4.71 (HX7530 Appl for SAP HANA (ThinkAgile)), \u0434\u043e 4.71 (VX3331 Certified Node (ThinkAgile)), \u0434\u043e 4.11 TGBT50C (HX Enclosure Certified Node), \u0434\u043e 4.11 TEI3E4A (HX1021 Edge Certified Node 3yr), \u0434\u043e 9.97 CDI3B4B (HX1320 Appliance), \u0434\u043e 9.97 CDI3B4B (HX1321 Certified Node), \u0434\u043e 4.71 (HX1331 Certified Node (ThinkAgile)), \u0434\u043e 9.97 CDI3B4B (HX1520-R Appliance), \u0434\u043e 9.97 CDI3B4B (HX1521-R Certified Node), \u0434\u043e 9.97 CDI3B4B (HX2320-E Appliance), \u0434\u043e 9.97 CDI3B4B (HX2321 Certified Node), \u0434\u043e 4.71 (HX2330 Appliance (ThinkAgile)), \u0434\u043e 4.71 (HX2331 Certified Node (ThinkAgile)), \u0434\u043e 4.11 TGBT50C (HX2720-E Appliance), \u0434\u043e 9.97 CDI3B4B (HX3320 Appliance), \u0434\u043e 9.97 CDI3B4B (HX3321 Certified Node), \u0434\u043e 4.71 (HX3330 Appliance (ThinkAgile)), \u0434\u043e 4.71 (HX3331 Certified Node (ThinkAgile)), \u0434\u043e 4.71 (HX3331 Node SAP HANA (ThinkAgile)), \u0434\u043e 5.61 D8BT64D (HX3375 Appliance), \u0434\u043e 5.61 D8BT64D (HX3376 Certified Node), \u0434\u043e 9.97 CDI3B4B (HX3520-G Appliance), \u0434\u043e 9.97 CDI3B4B (HX3521-G Certified Node), \u0434\u043e 4.11 TGBT50C (HX3720 Appliance), \u0434\u043e 4.11 TGBT50C (HX3721 Certified Node), \u0434\u043e 9.97 CDI3B4B (HX5520 Appliance), \u0434\u043e 9.97 CDI3B4B (HX5520-C Appliance), \u0434\u043e 9.97 CDI3B4B (HX5521 Certified Node), \u0434\u043e 9.97 CDI3B4B (HX5521-C Certified Node), \u0434\u043e 4.71 (HX5531 Certified Node (ThinkAgile)), \u0434\u043e 9.97 CDI3B4B (HX7520 Appliance), \u0434\u043e 9.97 CDI3B4B (HX7521 Certified Node), \u0434\u043e 4.71 (VX7531 Certified Node), \u0434\u043e 4.71 (HX7531 Node SAP HANA (ThinkAgile)), \u0434\u043e 3.11 PSI354A (HX7820 Appliance), \u0434\u043e 3.11 PSI354A (HX7821 Certified Node), \u0434\u043e 4.11 TEI3E4A (MX Edge Appliance - MX1020), \u0434\u043e 4.71 (MX3330-F All-flash Appliance (ThinkAgile)), \u0434\u043e 4.71 (MX3330-H Hybrid Appliance (ThinkAgile)), \u0434\u043e 4.71 (MX3331-F All-flash Certified node (ThinkAgile)), \u0434\u043e 4.71 (MX3331-H Hybrid Certified node (ThinkAgile)), \u0434\u043e 4.71 (MX3530 F All flash Appliance (ThinkAgile)), \u0434\u043e 4.71 (MX3530-H Hybrid Appliance (ThinkAgile)), \u0434\u043e 4.71 (MX3531 H Hybrid Certified node (ThinkAgile)), \u0434\u043e 4.11 TEI3E4A (ThinkAgile MX1021 on SE350), \u0434\u043e 4.11 TGBT50C (VX 1SE Certified Node), \u0434\u043e 4.11 TGBT50C (VX 2U4N Certified Node), \u0434\u043e 4.11 TGBT50C (HX1320 Appliance), \u0434\u043e 9.97 CDI3B4B (VX2320), \u0434\u043e 4.71 (VX2330 Appliance (ThinkAgile)), \u0434\u043e 9.97 CDI3B4B (VX3320), \u0434\u043e 4.71 (VX3330 Appliance (ThinkAgile)), \u0434\u043e 9.97 CDI3B4B (VX3520-G), \u0434\u043e 4.71 (VX3530-G Appliance (ThinkAgile)), \u0434\u043e 4.11 TGBT50C (VX3720), \u0434\u043e 9.97 CDI3B4B (VX5520), \u0434\u043e 4.71 (VX5530 Appliance (ThinkAgile)), \u0434\u043e 2.81 KAX330B (VX635 V3 Integrated System (ThinkAgile)), \u0434\u043e 2.81 KAX330B (VX645 V3 Certified Node (ThinkAgile)), \u0434\u043e 2.81 KAX330B (VX655 V3 Certified Node (ThinkAgile)), \u0434\u043e 2.81 KAX330B (VX655 V3 Integrated System (ThinkAgile)), \u0434\u043e 2.81 KAX330B (VX645 V3 Integrated System (ThinkAgile)), \u0434\u043e 2.81 KAX330B (VX665 V3 Certified Node (ThinkAgile)), \u0434\u043e 2.81 KAX330B (VX665 V3 Integrated System (ThinkAgile)), \u0434\u043e 9.97 CDI3B4B (VX7320 N), \u0434\u043e 4.71 (VX7330 Appliance (Thinkagile)), \u0434\u043e 9.97 CDI3B4B (VX7520), \u0434\u043e 9.97 CDI3B4B (VX7520 N), \u0434\u043e 4.71 (VX7530 Appliance (ThinkAgile)), \u0434\u043e 4.71 (VX7531 Certified Node (ThinkAgile)), \u0434\u043e 3.11 PSI354A (VX7820), \u0434\u043e 2.12 IYX324F (SE350 V2 (ThinkEdge)), \u0434\u043e 2.12 IYX324F (SE360 V2 (ThinkEdge)), \u0434\u043e 3.11 USX332X (SE450), \u0434\u043e 2.12 MBX306K (SE455 V3 (ThinkEdge)), \u0434\u043e 9.97 CDI3B4B (P920 Rack Workstation), \u0434\u043e 1.12 CTX304D (ST250 V3 (ThinkSystem)), \u0434\u043e 4.11 TGBT50C (SD530), \u0434\u043e 4.11 TGBT50C (SD630 V2 (ThinkSystem)), \u0434\u043e 6.36 TEI3F4A (SD650 DWC Dual Node Tray), \u0434\u043e 4.11 TGBT50C (SD650 DWC Dual Node Tray), \u0434\u043e 4.11 TGBT50C (SD650 V2 (ThinkSystem)), \u0434\u043e 4.11 USX342E (SD650 V3 (ThinkSystem)), \u0434\u043e 4.11 TGBT50C (SD650-N V2 (ThinkSystem)), \u0434\u043e 5.11 QGX330E (SD665 V3 (ThinkSystem)), \u0434\u043e 4.11 TEI3E4A (SE350), \u0434\u043e 6.36 TEI3F4A (SN550), \u0434\u043e 4.11 TGBT50C (SN550), \u0434\u043e 4.11 TGBT50C (SN550 V2 (ThinkSystem)), \u0434\u043e 6.36 TEI3F4A (SN850), \u0434\u043e 4.11 TGBT50C (SN850), \u0434\u043e 4.11 TGBT50C (SR150), \u0434\u043e 4.11 TGBT50C (SR158), \u0434\u043e 4.11 TGBT50C (SR250), \u0434\u043e 4.11 TGBT50C (SR250 V2), \u0434\u043e 4.11 TGBT50C (SR258), \u0434\u043e 4.11 TGBT50C (SR258 V2), \u0434\u043e 4.12 CTX304D (SR258 V3 (ThinkSystem)), \u0434\u043e 9.97 CDI3B4B (SR530), \u0434\u043e 9.97 CDI3B4B (SR550), \u0434\u043e 9.97 CDI3B4B (SR570), \u0434\u043e 9.97 CDI3B4B (SR590), \u0434\u043e 9.97 CDI3B4B (SR630), \u0434\u043e 4.71 (SR630 V2 (ThinkSystem)), \u0434\u043e 4.51 ESX328B (SR630 V3 (ThinkSystem)), \u0434\u043e 2.81 KAX330B (SR635 V3 (ThinkSystem)), \u0434\u043e 5.61 D8BT64D (SR645), \u0434\u043e 5.61 D8BT64D (SR645 V3 (ThinkSystem)), \u0434\u043e 2.81 KAX330B (SR645 V3 (ThinkSystem)), \u0434\u043e 9.97 CDI3B4B (SR650), \u0434\u043e 4.71 (SR650 V2 (ThinkSystem)), \u0434\u043e 4.51 ESX328B (SR650 V2 (ThinkSystem)), \u0434\u043e 4.51 ESX328B (SR650 V3 (ThinkSystem)), \u0434\u043e 2.81 KAX330B (SR655 V3 (ThinkSystem)), \u0434\u043e 5.61 D8BT64D (SR655), \u0434\u043e 5.61 D8BT64D (SR665), \u0434\u043e 5.61 D8BT64D (SR665 V3 (ThinkSystem)), \u0434\u043e 2.81 KAX330B (SR665 V3 (ThinkSystem)), \u0434\u043e 4.11 TEI3E4A (SR670), \u0434\u043e 4.11 TGBT50C (SR670 V2 (ThinkSystem)), \u0434\u043e 5.11 QGX336E (SR675 V3 (ThinkSystem)), \u0434\u043e 6.36 TEI3F4A (SR850), \u0434\u043e 4.11 TGBT50C (SR850), \u0434\u043e 4.11 TGBT50C (SR850 V2 (ThinkSystem)), \u0434\u043e 1.20 USX352D (SR850 V3 (ThinkSystem)), \u0434\u043e 4.11 TEI3E4A (SR850P), \u0434\u043e 6.36 TEI3F4A (SR860), \u0434\u043e 4.11 TGBT50C (SR860), \u0434\u043e 4.11 TGBT50C (SR860 V2 (ThinkSystem)), \u0434\u043e 1.20 USX352D (Lenovo ThinkSystem SR860 V3), \u0434\u043e 3.11 PSI354A (SR950), \u0434\u043e 2.11 EBE106H (SR950 V3 (ThinkSystem)), \u0434\u043e 4.11 TGBT50C (ST250), \u0434\u043e 4.11 TGBT50C (ST250 V2), \u0434\u043e 4.11 TGBT50C (ST258), \u0434\u043e 4.11 TGBT50C (ST258 V2), \u0434\u043e 1.12 CTX304D (ST258 V3 (ThinkSystem)), \u0434\u043e 9.97 CDI3B4B (ST550), \u0434\u043e 4.11 TGBT50C (ST650 V2 (ThinkSystem)), \u0434\u043e 4.11 USX342E (ST650 V3 (ThinkSystem)), \u0434\u043e 4.11 TGBT50C (ST658 V2 (ThinkSystem)), \u0434\u043e 4.11 USX342E (Lenovo ThinkSystem ST658 V3)",
  "\u0412\u043e\u0437\u043c\u043e\u0436\u043d\u044b\u0435 \u043c\u0435\u0440\u044b \u043f\u043e \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0438\u044e": "\u0418\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u0435 \u0440\u0435\u043a\u043e\u043c\u0435\u043d\u0434\u0430\u0446\u0438\u0439:\nhttps://support.lenovo.com/vn/en/product_security/ps500634-lenovo-xclarity-controller-xcc-vulnerabilities",
  "\u0414\u0430\u0442\u0430 \u0432\u044b\u044f\u0432\u043b\u0435\u043d\u0438\u044f": "09.07.2024",
  "\u0414\u0430\u0442\u0430 \u043f\u043e\u0441\u043b\u0435\u0434\u043d\u0435\u0433\u043e \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u044f": "19.01.2025",
  "\u0414\u0430\u0442\u0430 \u043f\u0443\u0431\u043b\u0438\u043a\u0430\u0446\u0438\u0438": "13.01.2025",
  "\u0418\u0434\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0442\u043e\u0440": "BDU:2025-00187",
  "\u0418\u0434\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0442\u043e\u0440\u044b \u0434\u0440\u0443\u0433\u0438\u0445 \u0441\u0438\u0441\u0442\u0435\u043c \u043e\u043f\u0438\u0441\u0430\u043d\u0438\u0439 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": "CVE-2024-38512, LEN-156781",
  "\u0418\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u044f \u043e\u0431 \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0438\u0438": "\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0430",
  "\u041a\u043b\u0430\u0441\u0441 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": "\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u043a\u043e\u0434\u0430",
  "\u041d\u0430\u0437\u0432\u0430\u043d\u0438\u0435 \u041f\u041e": "HX5530 Appliance (ThinkAgile), HX7530 Appl for SAP HANA (ThinkAgile), VX3331 Certified Node (ThinkAgile), HX Enclosure Certified Node, HX1021 Edge Certified Node 3yr, HX1320 Appliance, HX1321 Certified Node, HX1331 Certified Node (ThinkAgile), HX1520-R Appliance, HX1521-R Certified Node, HX2320-E Appliance, HX2321 Certified Node, HX2330 Appliance (ThinkAgile), HX2331 Certified Node (ThinkAgile), HX2720-E Appliance, HX3320 Appliance, HX3321 Certified Node, HX3330 Appliance (ThinkAgile), HX3331 Certified Node (ThinkAgile), HX3331 Node SAP HANA (ThinkAgile), HX3375 Appliance, HX3376 Certified Node, HX3520-G Appliance, HX3521-G Certified Node, HX3720 Appliance, HX3721 Certified Node, HX5520 Appliance, HX5520-C Appliance, HX5521 Certified Node, HX5521-C Certified Node, HX5531 Certified Node (ThinkAgile), HX7520 Appliance, HX7521 Certified Node, VX7531 Certified Node, HX7531 Node SAP HANA (ThinkAgile), HX7820 Appliance, HX7821 Certified Node, MX Edge Appliance - MX1020, MX3330-F All-flash Appliance (ThinkAgile), MX3330-H Hybrid Appliance (ThinkAgile), MX3331-F All-flash Certified node (ThinkAgile), MX3331-H Hybrid Certified node (ThinkAgile), MX3530 F All flash Appliance (ThinkAgile), MX3530-H Hybrid Appliance (ThinkAgile), MX3531 H Hybrid Certified node (ThinkAgile), ThinkAgile MX1021 on SE350, VX 1SE Certified Node, VX 2U4N Certified Node, VX2320, VX2330 Appliance (ThinkAgile), VX3320, VX3330 Appliance (ThinkAgile), VX3520-G, VX3530-G Appliance (ThinkAgile), VX3720, VX5520, VX5530 Appliance (ThinkAgile), VX635 V3 Integrated System (ThinkAgile), VX645 V3 Certified Node (ThinkAgile), VX655 V3 Certified Node (ThinkAgile), VX655 V3 Integrated System (ThinkAgile), VX645 V3 Integrated System (ThinkAgile), VX665 V3 Certified Node (ThinkAgile), VX665 V3 Integrated System (ThinkAgile), VX7320 N, VX7330 Appliance (Thinkagile), VX7520, VX7520 N, VX7530 Appliance (ThinkAgile), VX7531 Certified Node (ThinkAgile), VX7820, SE350 V2 (ThinkEdge), SE360 V2 (ThinkEdge), SE450, SE455 V3 (ThinkEdge), P920 Rack Workstation, ST250 V3 (ThinkSystem), SD530, SD630 V2 (ThinkSystem), SD650 DWC Dual Node Tray, SD650 V2 (ThinkSystem), SD650 V3 (ThinkSystem), SD650-N V2 (ThinkSystem), SD665 V3 (ThinkSystem), SE350, SN550, SN550 V2 (ThinkSystem), SN850, SR150, SR158, SR250, SR250 V2, SR258, SR258 V2, SR258 V3 (ThinkSystem), SR530, SR550, SR570, SR590, SR630, SR630 V2 (ThinkSystem), SR630 V3 (ThinkSystem), SR635 V3 (ThinkSystem), SR645, SR645 V3 (ThinkSystem), SR650, SR650 V2 (ThinkSystem), SR650 V3 (ThinkSystem), SR655 V3 (ThinkSystem), SR655, SR665, SR665 V3 (ThinkSystem), SR670, SR670 V2 (ThinkSystem), SR675 V3 (ThinkSystem), SR850, SR850 V2 (ThinkSystem), SR850 V3 (ThinkSystem), SR850P, SR860, SR860 V2 (ThinkSystem), Lenovo ThinkSystem SR860 V3, SR950, SR950 V3 (ThinkSystem), ST250, ST250 V2, ST258, ST258 V2, ST258 V3 (ThinkSystem), ST550, ST650 V2 (ThinkSystem), ST650 V3 (ThinkSystem), ST658 V2 (ThinkSystem), Lenovo ThinkSystem ST658 V3",
  "\u041d\u0430\u0438\u043c\u0435\u043d\u043e\u0432\u0430\u043d\u0438\u0435 \u041e\u0421 \u0438 \u0442\u0438\u043f \u0430\u043f\u043f\u0430\u0440\u0430\u0442\u043d\u043e\u0439 \u043f\u043b\u0430\u0442\u0444\u043e\u0440\u043c\u044b": null,
  "\u041d\u0430\u0438\u043c\u0435\u043d\u043e\u0432\u0430\u043d\u0438\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": "\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u043a\u043e\u043d\u0442\u0440\u043e\u043b\u043b\u0435\u0440\u0430 Lenovo XClarity Controller (XCC) \u0434\u043b\u044f \u0441\u0435\u0440\u0432\u0435\u0440\u043e\u0432 Lenovo ThinkSystem, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0430\u044f \u043d\u0430\u0440\u0443\u0448\u0438\u0442\u0435\u043b\u044e \u0432\u044b\u043f\u043e\u043b\u043d\u0438\u0442\u044c \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u044b\u0435 \u043a\u043e\u043c\u0430\u043d\u0434\u044b",
  "\u041d\u0430\u043b\u0438\u0447\u0438\u0435 \u044d\u043a\u0441\u043f\u043b\u043e\u0439\u0442\u0430": "\u0414\u0430\u043d\u043d\u044b\u0435 \u0443\u0442\u043e\u0447\u043d\u044f\u044e\u0442\u0441\u044f",
  "\u041e\u043f\u0438\u0441\u0430\u043d\u0438\u0435 \u043e\u0448\u0438\u0431\u043a\u0438 CWE": "\u041d\u0435\u043f\u0440\u0438\u043d\u044f\u0442\u0438\u0435 \u043c\u0435\u0440 \u043f\u043e \u043d\u0435\u0439\u0442\u0440\u0430\u043b\u0438\u0437\u0430\u0446\u0438\u0438 \u0441\u043f\u0435\u0446\u0438\u0430\u043b\u044c\u043d\u044b\u0445 \u044d\u043b\u0435\u043c\u0435\u043d\u0442\u043e\u0432, \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u0435\u043c\u044b\u0445 \u0432 \u043a\u043e\u043c\u0430\u043d\u0434\u0435 \u043e\u043f\u0435\u0440\u0430\u0446\u0438\u043e\u043d\u043d\u043e\u0439 \u0441\u0438\u0441\u0442\u0435\u043c\u044b (\u0412\u043d\u0435\u0434\u0440\u0435\u043d\u0438\u0435 \u0432 \u043a\u043e\u043c\u0430\u043d\u0434\u0443 \u043e\u043f\u0435\u0440\u0430\u0446\u0438\u043e\u043d\u043d\u043e\u0439 \u0441\u0438\u0441\u0442\u0435\u043c\u044b) (CWE-78)",
  "\u041e\u043f\u0438\u0441\u0430\u043d\u0438\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": "\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u043a\u043e\u043d\u0442\u0440\u043e\u043b\u043b\u0435\u0440\u0430 Lenovo XClarity Controller (XCC) \u0434\u043b\u044f \u0441\u0435\u0440\u0432\u0435\u0440\u043e\u0432 Lenovo ThinkSystem \u0441\u0432\u044f\u0437\u0430\u043d\u0430 \u0441 \u043d\u0435\u043f\u0440\u0438\u043d\u044f\u0442\u0438\u0435\u043c \u043c\u0435\u0440 \u043f\u043e \u043d\u0435\u0439\u0442\u0440\u0430\u043b\u0438\u0437\u0430\u0446\u0438\u0438 \u0441\u043f\u0435\u0446\u0438\u0430\u043b\u044c\u043d\u044b\u0445 \u044d\u043b\u0435\u043c\u0435\u043d\u0442\u043e\u0432. \u042d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u043c\u043e\u0436\u0435\u0442 \u043f\u043e\u0437\u0432\u043e\u043b\u0438\u0442\u044c \u043d\u0430\u0440\u0443\u0448\u0438\u0442\u0435\u043b\u044e, \u0434\u0435\u0439\u0441\u0442\u0432\u0443\u044e\u0449\u0435\u043c\u0443 \u0443\u0434\u0430\u043b\u0451\u043d\u043d\u043e, \u0432\u044b\u043f\u043e\u043b\u043d\u0438\u0442\u044c \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u044b\u0435 \u043a\u043e\u043c\u0430\u043d\u0434\u044b \u0441 \u043f\u043e\u043c\u043e\u0449\u044c\u044e \u0441\u043f\u0435\u0446\u0438\u0430\u043b\u044c\u043d\u043e \u0441\u043e\u0437\u0434\u0430\u043d\u043d\u043e\u0439 \u043a\u043e\u043c\u0430\u043d\u0434\u044b IPMI",
  "\u041f\u043e\u0441\u043b\u0435\u0434\u0441\u0442\u0432\u0438\u044f \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": null,
  "\u041f\u0440\u043e\u0447\u0430\u044f \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u044f": null,
  "\u0421\u0432\u044f\u0437\u044c \u0441 \u0438\u043d\u0446\u0438\u0434\u0435\u043d\u0442\u0430\u043c\u0438 \u0418\u0411": "\u0414\u0430\u043d\u043d\u044b\u0435 \u0443\u0442\u043e\u0447\u043d\u044f\u044e\u0442\u0441\u044f",
  "\u0421\u043e\u0441\u0442\u043e\u044f\u043d\u0438\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": "\u041e\u043f\u0443\u0431\u043b\u0438\u043a\u043e\u0432\u0430\u043d\u0430",
  "\u0421\u043f\u043e\u0441\u043e\u0431 \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0438\u044f": "\u041e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u0435 \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c\u043d\u043e\u0433\u043e \u043e\u0431\u0435\u0441\u043f\u0435\u0447\u0435\u043d\u0438\u044f",
  "\u0421\u043f\u043e\u0441\u043e\u0431 \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438": "\u0418\u043d\u044a\u0435\u043a\u0446\u0438\u044f",
  "\u0421\u0441\u044b\u043b\u043a\u0438 \u043d\u0430 \u0438\u0441\u0442\u043e\u0447\u043d\u0438\u043a\u0438": "https://support.lenovo.com/vn/en/product_security/ps500634-lenovo-xclarity-controller-xcc-vulnerabilities",
  "\u0421\u0442\u0430\u0442\u0443\u0441 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": "\u041f\u043e\u0434\u0442\u0432\u0435\u0440\u0436\u0434\u0435\u043d\u0430 \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u0434\u0438\u0442\u0435\u043b\u0435\u043c",
  "\u0422\u0438\u043f \u041f\u041e": "\u041c\u0438\u043a\u0440\u043e\u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c\u043d\u044b\u0439 \u043a\u043e\u0434, \u041f\u041e \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c\u043d\u043e-\u0430\u043f\u043f\u0430\u0440\u0430\u0442\u043d\u043e\u0433\u043e \u0441\u0440\u0435\u0434\u0441\u0442\u0432\u0430, \u0421\u0435\u0442\u0435\u0432\u043e\u0435 \u0441\u0440\u0435\u0434\u0441\u0442\u0432\u043e, \u041f\u041e \u0441\u0435\u0442\u0435\u0432\u043e\u0433\u043e \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c\u043d\u043e-\u0430\u043f\u043f\u0430\u0440\u0430\u0442\u043d\u043e\u0433\u043e \u0441\u0440\u0435\u0434\u0441\u0442\u0432\u0430",
  "\u0422\u0438\u043f \u043e\u0448\u0438\u0431\u043a\u0438 CWE": "CWE-78",
  "\u0423\u0440\u043e\u0432\u0435\u043d\u044c \u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": "\u0412\u044b\u0441\u043e\u043a\u0438\u0439 \u0443\u0440\u043e\u0432\u0435\u043d\u044c \u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 (\u0431\u0430\u0437\u043e\u0432\u0430\u044f \u043e\u0446\u0435\u043d\u043a\u0430 CVSS 2.0 \u0441\u043e\u0441\u0442\u0430\u0432\u043b\u044f\u0435\u0442 9)\n\u0412\u044b\u0441\u043e\u043a\u0438\u0439 \u0443\u0440\u043e\u0432\u0435\u043d\u044c \u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 (\u0431\u0430\u0437\u043e\u0432\u0430\u044f \u043e\u0446\u0435\u043d\u043a\u0430 CVSS 3.0 \u0441\u043e\u0441\u0442\u0430\u0432\u043b\u044f\u0435\u0442 7,2)"
}

CVE-2024-38512 (GCVE-0-2024-38512)

Vulnerability from cvelistv5 – Published: 2024-07-26 19:45 – Updated: 2024-08-02 04:12

Summary

A privilege escalation vulnerability was discovered in XCC that could allow an authenticated XCC user with elevated privileges to perform command injection via specially crafted IPMI commands.

Severity

7.2 (High)


                        
                          CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H

SSVC

Exploitation: none Automatable: no Technical Impact: total

CISA Coordinator · CISA-ADP (v2.0.3)

Decision recorded 2024-07-26 20:39 UTC

CWE

CWE-78 - Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')

Assigner

lenovo mitre root

References

1 reference

URL	Tags
https://support.lenovo.com/us/en/product_security…

Impacted products

113 products

Vendor	Product	Version
Lenovo	XClarity Controller	Affected: various
lenovo	thinkagile_hx5530_firmware	Affected: 0 , < 4.71 (custom) cpe:2.3:o:lenovo:thinkagile_hx5530_firmware:-:::::::*
lenovo	thinkagile_hx7530_firmware	Affected: 0 , < 4.71 (custom) cpe:2.3:o:lenovo:thinkagile_hx7530_firmware:-:::::::*
lenovo	thinkagile_vx3331_firmware	Affected: 0 , < 4.71 (custom) cpe:2.3:o:lenovo:thinkagile_vx3331_firmware:-:::::::*
lenovo	thinkagile_hx_enclosure_certified_node_firmware	Affected: 0 , < 4.11 (custom) cpe:2.3:o:lenovo:thinkagile_hx_enclosure_certified_node_firmware:-:::::::*
lenovo	thinkagile_hx1021_edg_firmware	Affected: 0 , < 4.11 (custom) cpe:2.3:o:lenovo:thinkagile_hx1021_edg_firmware:-:::::::*
lenovo	thinkagile_hx1320_firmware	Affected: 0 , < 9.97 (custom) cpe:2.3:o:lenovo:thinkagile_hx1320_firmware:-:::::::*
lenovo	thinkagile_hx1331_firmware	Affected: 0 , < 4.71 (custom) cpe:2.3:o:lenovo:thinkagile_hx1331_firmware:-:::::::*
lenovo	thinkagile_hx1321_firmware	Affected: 0 , < 9.97 (custom) cpe:2.3:o:lenovo:thinkagile_hx1321_firmware:-:::::::*
lenovo	thinkagile_hx1520-r_firmware	Affected: 0 , < 9.97 (custom) cpe:2.3:o:lenovo:thinkagile_hx1520-r_firmware:-:::::::*
lenovo	thinkagile_hx1521-r_firmware	Affected: 0 , < 9.97 (custom) cpe:2.3:o:lenovo:thinkagile_hx1521-r_firmware:-:::::::*
lenovo	thinkagile_hx2320-e_firmware	Affected: 0 , < 9.97 (custom) cpe:2.3:o:lenovo:thinkagile_hx2320-e_firmware:-:::::::*
lenovo	thinkagile_hx2321_firmware	Affected: 0 , < 9.97 (custom) cpe:2.3:o:lenovo:thinkagile_hx2321_firmware:-:::::::*
lenovo	thinkagile_hx2330_firmware	Affected: 0 , < 4.71 (custom) cpe:2.3:o:lenovo:thinkagile_hx2330_firmware:-:::::::*
lenovo	thinkagile_hx2331_firmware	Affected: 0 , < 4.71 (custom) cpe:2.3:o:lenovo:thinkagile_hx2331_firmware:-:::::::*
lenovo	thinkagile_hx2720-e_firmware	Affected: 0 , < 4.11 (custom) cpe:2.3:o:lenovo:thinkagile_hx2720-e_firmware:-:::::::*
lenovo	thinkagile_hx3320_firmware	Affected: 0 , < 9.97 (custom) cpe:2.3:o:lenovo:thinkagile_hx3320_firmware:-:::::::*
lenovo	thinkagile_hx3321_firmware	Affected: 0 , < 9.97 (custom) cpe:2.3:o:lenovo:thinkagile_hx3321_firmware:-:::::::*
lenovo	thinkagile_hx3330_firmware	Affected: 0 , < 4.71 (custom) cpe:2.3:o:lenovo:thinkagile_hx3330_firmware:-:::::::*
lenovo	thinkagile_hx3331	Affected: 0 , < 4.71 (custom) cpe:2.3:h:lenovo:thinkagile_hx3331:-:::::::*
lenovo	thinkagile_hx3375_firmware	Affected: 0 , < 5.61 (custom) cpe:2.3:o:lenovo:thinkagile_hx3375_firmware:-:::::::*
lenovo	thinkagile_hx3376_firmware	Affected: 0 , < 5.61 (custom) cpe:2.3:o:lenovo:thinkagile_hx3376_firmware:-:::::::*
lenovo	thinkagile_hx3520-g_firmware	Affected: 0 , < 9.97 (custom) cpe:2.3:o:lenovo:thinkagile_hx3520-g_firmware:-:::::::*
lenovo	thinkagile_hx3521-g_firmware	Affected: 0 , < 9.97 (custom) cpe:2.3:o:lenovo:thinkagile_hx3521-g_firmware:-:::::::*
lenovo	thinkagile_hx3720_firmware	Affected: 0 , < 4.11 (custom) cpe:2.3:o:lenovo:thinkagile_hx3720_firmware:-:::::::*
lenovo	thinkagile_hx3721_firmware	Affected: 0 , < 4.11 (custom) cpe:2.3:o:lenovo:thinkagile_hx3721_firmware:-:::::::*
lenovo	thinkagile_hx5520-c_firmware	Affected: 0 , < 9.97 (custom) cpe:2.3:o:lenovo:thinkagile_hx5520-c_firmware:-:::::::*
lenovo	thinkagile_hx5521-c_firmware	Affected: 0 , < 9.97 (custom) cpe:2.3:o:lenovo:thinkagile_hx5521-c_firmware:-:::::::*
lenovo	thinkagile_hx5531_firmware	Affected: 0 , < 4.71 (custom) cpe:2.3:o:lenovo:thinkagile_hx5531_firmware:-:::::::*
lenovo	thinkagile_hx7520_firmware	Affected: 0 , < 9.97 (custom) cpe:2.3:o:lenovo:thinkagile_hx7520_firmware:-:::::::*
lenovo	thinkagile_hx7521_firmware	Affected: 0 , < 9.97 (custom) cpe:2.3:o:lenovo:thinkagile_hx7521_firmware:-:::::::*
lenovo	thinkagile_hx7531_firmware	Affected: 0 , < 4.71 (custom) cpe:2.3:o:lenovo:thinkagile_hx7531_firmware:-:::::::*
lenovo	thinkagile_hx7820_firmware	Affected: 0 , < 3.11 (custom) cpe:2.3:o:lenovo:thinkagile_hx7820_firmware:-:::::::*
lenovo	thinkagile_hx7821_firmware	Affected: 0 , < 3.11 (custom) cpe:2.3:o:lenovo:thinkagile_hx7821_firmware:-:::::::*
lenovo	thinkagile_mx1020_firmware	Affected: 0 , < 4.11 (custom) cpe:2.3:o:lenovo:thinkagile_mx1020_firmware:-:::::::*
lenovo	thinkagile_mx3330-f_firmware	Affected: 0 , < 4.71 (custom) cpe:2.3:o:lenovo:thinkagile_mx3330-f_firmware:-:::::::*
lenovo	thinkagile_mx3330-h_firmware	Affected: 0 , < 4.71 (custom) cpe:2.3:o:lenovo:thinkagile_mx3330-h_firmware:-:::::::*
lenovo	thinkagile_mx3331-f_firmware	Affected: 0 , < 4.71 (custom) cpe:2.3:o:lenovo:thinkagile_mx3331-f_firmware:-:::::::*
lenovo	thinkagile_mx3331-h_firmware	Affected: 0 , < 4.71 (custom) cpe:2.3:o:lenovo:thinkagile_mx3331-h_firmware:-:::::::*
lenovo	thinkagile_mx3530_f_firmware	Affected: 0 , < 4.71 (custom) cpe:2.3:o:lenovo:thinkagile_mx3530_f_firmware:-:::::::*
lenovo	thinkagile_mx3530-h_firmware	Affected: 0 , < 4.71 (custom) cpe:2.3:o:lenovo:thinkagile_mx3530-h_firmware:-:::::::*
lenovo	thinkagile_mx3531-f_firmware	Affected: 0 , < 4.71 (custom) cpe:2.3:o:lenovo:thinkagile_mx3531-f_firmware:-:::::::*
lenovo	thinkagile_vx1320_firmware	Affected: 0 , < 4.11 (custom) cpe:2.3:o:lenovo:thinkagile_vx1320_firmware:-:::::::*
lenovo	thinkagile_vx2320_firmware	Affected: 0 , < 9.97 (custom) cpe:2.3:o:lenovo:thinkagile_vx2320_firmware:-:::::::*
lenovo	thinkagile_vx2330_firmware	Affected: 0 , < 4.71 (custom) cpe:2.3:o:lenovo:thinkagile_vx2330_firmware:-:::::::*
lenovo	thinkagile_vx3320_firmware	Affected: 0 , < 9.97 (custom) cpe:2.3:o:lenovo:thinkagile_vx3320_firmware:-:::::::*
lenovo	thinkagile_vx3330_firmware	Affected: 0 , < 4.71 (custom) cpe:2.3:o:lenovo:thinkagile_vx3330_firmware:-:::::::*
lenovo	thinkagile_vx3520-g_firmware	Affected: 0 , < 9.97 (custom) cpe:2.3:o:lenovo:thinkagile_vx3520-g_firmware:-:::::::*
lenovo	thinkagile_vx3530-g_firmware	Affected: 0 , < 4.71 (custom) cpe:2.3:o:lenovo:thinkagile_vx3530-g_firmware:-:::::::*
lenovo	thinkagile_vx3720_firmware	Affected: 0 , < 4.11 (custom) cpe:2.3:o:lenovo:thinkagile_vx3720_firmware:-:::::::*
lenovo	thinkagile_vx5520_firmware	Affected: 0 , < 9.97 (custom) cpe:2.3:o:lenovo:thinkagile_vx5520_firmware:-:::::::*
lenovo	thinkagile_vx5530_firmware	Affected: 0 , < 4.71 (custom) cpe:2.3:o:lenovo:thinkagile_vx5530_firmware:-:::::::*
lenovo	thinkagile_vx7320_n_firmware	Affected: 0 , < 9.97 (custom) cpe:2.3:o:lenovo:thinkagile_vx7320_n_firmware:-:::::::*
lenovo	thinkagile_vx7330_firmware	Affected: 0 , < 4.71 (custom) cpe:2.3:o:lenovo:thinkagile_vx7330_firmware:-:::::::*
lenovo	thinkagile_vx7520_firmware	Affected: 0 , < 9.97 (custom) cpe:2.3:o:lenovo:thinkagile_vx7520_firmware:-:::::::*
lenovo	thinkagile_vx7520_n_firmware	Affected: 0 , < 9.97 (custom) cpe:2.3:o:lenovo:thinkagile_vx7520_n_firmware:-:::::::*
lenovo	thinkagile_vx7530_firmware	Affected: 0 , < 4.71 (custom) cpe:2.3:o:lenovo:thinkagile_vx7530_firmware:-:::::::*
lenovo	thinkagile_vx7531_firmware	Affected: 0 , < 4.71 (custom) cpe:2.3:o:lenovo:thinkagile_vx7531_firmware:-:::::::*
lenovo	thinkagile_vx7820_firmware	Affected: 0 , < 3.11 (custom) cpe:2.3:o:lenovo:thinkagile_vx7820_firmware:-:::::::*
lenovo	thinkstation_p920_workstation_firmware	Affected: 0 , < 9.97 (custom) cpe:2.3:o:lenovo:thinkstation_p920_workstation_firmware:-:::::::*
lenovo	thinksystem_st250_firmware	Affected: 0 , < 1.12 (custom) cpe:2.3:o:lenovo:thinksystem_st250_firmware:-:::::::*
lenovo	thinksystem_sd530_firmware	Affected: 0 , < 4.11 (custom) cpe:2.3:o:lenovo:thinksystem_sd530_firmware:-:::::::*
lenovo	thinksystem_sd630_v2_firmware	Affected: 0 , < 4.11 (custom) cpe:2.3:o:lenovo:thinksystem_sd630_v2_firmware:-:::::::*
lenovo	thinksystem_sd650_dual_node_tray_firmware	Affected: 0 , < 4.11 (custom) Affected: 0 , < 6.36 (custom) cpe:2.3:o:lenovo:thinksystem_sd650_dual_node_tray_firmware:-:::::::*
lenovo	thinksystem_sd650-n_v2_firmware	Affected: 0 , < 4.11 (custom) cpe:2.3:o:lenovo:thinksystem_sd650-n_v2_firmware:-:::::::*
lenovo	thinksystem_sd650_v3_firmware	Affected: 0 , < 4.11 (custom) cpe:2.3:o:lenovo:thinksystem_sd650_v3_firmware:-:::::::*
lenovo	thinksystem_sd665_v3_firmware	Affected: 0 , < 5.11 (custom) cpe:2.3:o:lenovo:thinksystem_sd665_v3_firmware:-:::::::*
lenovo	thinksystem_se350_firmware	Affected: 0 , < 4.11 (custom) cpe:2.3:o:lenovo:thinksystem_se350_firmware:-:::::::*
lenovo	thinksystem_sn550_firmware	Affected: 0 , < 4.11 (custom) Affected: 0 , < 6.36 (custom) cpe:2.3:o:lenovo:thinksystem_sn550_firmware:-:::::::*
lenovo	thinksystem_sn550_v2_firmware	Affected: 0 , < 4.11 (custom) cpe:2.3:o:lenovo:thinksystem_sn550_v2_firmware:-:::::::*
lenovo	thinksystem_sn850_firmware	Affected: 0 , < 4.11 (custom) Affected: 0 , < 6.36 (custom) cpe:2.3:o:lenovo:thinksystem_sn850_firmware:-:::::::*
lenovo	thinksystem_sr150_firmware	Affected: 0 , < 4.11 (custom) cpe:2.3:o:lenovo:thinksystem_sr150_firmware:-:::::::*
lenovo	thinksystem_sr158_firmware	Affected: 0 , < 4.11 (custom) cpe:2.3:o:lenovo:thinksystem_sr158_firmware:-:::::::*
lenovo	thinksystem_sr250_firmware	Affected: 0 , < 4.11 (custom) cpe:2.3:o:lenovo:thinksystem_sr250_firmware:-:::::::*
lenovo	thinksystem_sr250_v2_firmware	Affected: 0 , < 4.11 (custom) cpe:2.3:o:lenovo:thinksystem_sr250_v2_firmware:-:::::::*
lenovo	thinksystem_sr258_firmware	Affected: 0 , < 4.11 (custom) cpe:2.3:o:lenovo:thinksystem_sr258_firmware:-:::::::*
lenovo	thinksystem_sr258_v2_firmware	Affected: 0 , < 4.11 (custom) cpe:2.3:o:lenovo:thinksystem_sr258_v2_firmware:-:::::::*
lenovo	thinksystem_sr530_firmware	Affected: 0 , < 9.97 (custom) cpe:2.3:o:lenovo:thinksystem_sr530_firmware:-:::::::*
lenovo	thinksystem_sr550_firmware	Affected: 0 , < 9.97 (custom) cpe:2.3:o:lenovo:thinksystem_sr550_firmware:-:::::::*
lenovo	thinksystem_sr570_firmware	Affected: 0 , < 9.97 (custom) cpe:2.3:o:lenovo:thinksystem_sr570_firmware:-:::::::*
lenovo	thinksystem_sr590_firmware	Affected: 0 , < 9.97 (custom) cpe:2.3:o:lenovo:thinksystem_sr590_firmware:-:::::::*
lenovo	thinksystem_sr630_firmware	Affected: 0 , < 9.97 (custom) cpe:2.3:o:lenovo:thinksystem_sr630_firmware:-:::::::*
lenovo	thinksystem_sr630_v2_firmware	Affected: 0 , < 4.71 (custom) cpe:2.3:o:lenovo:thinksystem_sr630_v2_firmware:-:::::::*
lenovo	thinksystem_sr630_v3_firmware	Affected: 0 , < 4.51 (custom) cpe:2.3:o:lenovo:thinksystem_sr630_v3_firmware:-:::::::*
lenovo	thinksystem_sr635_firmware	Affected: 0 , < 2.81 (custom) cpe:2.3:o:lenovo:thinksystem_sr635_firmware:-:::::::*
lenovo	thinksystem_sr645_firmware	Affected: 0 , < 5.61 (custom) cpe:2.3:o:lenovo:thinksystem_sr645_firmware:-:::::::*
lenovo	thinksystem_sr645_v3_firmware	Affected: 0 , < 2.81 (custom) cpe:2.3:o:lenovo:thinksystem_sr645_v3_firmware:-:::::::*
lenovo	thinksystem_sr650_firmware	Affected: 0 , < 9.97 (custom) cpe:2.3:o:lenovo:thinksystem_sr650_firmware:-:::::::*
lenovo	thinksystem_sr650_v2_firmware	Affected: 0 , < 4.71 (custom) cpe:2.3:o:lenovo:thinksystem_sr650_v2_firmware:-:::::::*
lenovo	thinksystem_sr655_v3_firmware	Affected: 0 , < 2.81 (custom) cpe:2.3:o:lenovo:thinksystem_sr655_v3_firmware:-:::::::*
lenovo	thinksystem_sr665_firmware	Affected: 0 , < 5.61 (custom) cpe:2.3:o:lenovo:thinksystem_sr665_firmware:-:::::::*
lenovo	thinksystem_sr665_v3_firmware	Affected: 0 , < 5.61 (custom) Affected: 0 , < 2.81 (custom) cpe:2.3:o:lenovo:thinksystem_sr665_v3_firmware:-:::::::*
lenovo	thinksystem_sr670_firmware	Affected: 0 , < 4.11 (custom) cpe:2.3:o:lenovo:thinksystem_sr670_firmware:-:::::::*
lenovo	thinksystem_sr670_v2_firmware	Affected: 0 , < 4.11 (custom) cpe:2.3:o:lenovo:thinksystem_sr670_v2_firmware:-:::::::*
lenovo	thinksystem_sr670_v2_firmware	Affected: 0 , < 5.11 (custom) cpe:2.3:o:lenovo:thinksystem_sr670_v2_firmware:-:::::::*
lenovo	thinksystem_sr675_v3_firmware	Affected: 0 , < 5.11 (custom) cpe:2.3:o:lenovo:thinksystem_sr675_v3_firmware:-:::::::*
lenovo	thinksystem_sr850_firmware	Affected: 0 , < 6.36 (custom) Affected: 0 , < 4.11 (custom) cpe:2.3:o:lenovo:thinksystem_sr850_firmware:-:::::::*
lenovo	thinksystem_sr850_v2_firmware	Affected: 0 , < 4.11 (custom) cpe:2.3:o:lenovo:thinksystem_sr850_v2_firmware:-:::::::*
lenovo	thinksystem_sr850_v3_firmware	Affected: 0 , < 1.20 (custom) cpe:2.3:o:lenovo:thinksystem_sr850_v3_firmware:-:::::::*
lenovo	thinksystem_sr850p_firmware	Affected: 0 , < 6.36 (custom) cpe:2.3:o:lenovo:thinksystem_sr850p_firmware:-:::::::*
lenovo	thinksystem_sr860_firmware	Affected: 0 , < 4.11 (custom) cpe:2.3:o:lenovo:thinksystem_sr860_firmware:-:::::::*
lenovo	thinksystem_sr860_v2_firmware	Affected: 0 , < 4.11 (custom) cpe:2.3:o:lenovo:thinksystem_sr860_v2_firmware:-:::::::*
lenovo	thinksystem_sr860_v3_firmware	Affected: 0 , < 1.20 (custom) cpe:2.3:o:lenovo:thinksystem_sr860_v3_firmware:-:::::::*
lenovo	thinksystem_sr950_firmware	Affected: 0 , < 3.11 (custom) cpe:2.3:o:lenovo:thinksystem_sr950_firmware:-:::::::*
lenovo	thinksystem_st250_firmware	Affected: 0 , < 4.11 (custom) cpe:2.3:o:lenovo:thinksystem_st250_firmware:-:::::::*
lenovo	thinksystem_st250_v2_firmware	Affected: 0 , < 4.11 (custom) cpe:2.3:o:lenovo:thinksystem_st250_v2_firmware:-:::::::*
lenovo	thinksystem_st258_firmware	Affected: 0 , < 4.11 (custom) cpe:2.3:o:lenovo:thinksystem_st258_firmware:-:::::::*
lenovo	thinksystem_st258_v2_firmware	Affected: 0 , < 4.11 (custom) cpe:2.3:o:lenovo:thinksystem_st258_v2_firmware:-:::::::*
lenovo	thinksystem_st550_firmware	Affected: 0 , < 9.97 (custom) cpe:2.3:o:lenovo:thinksystem_st550_firmware:-:::::::*
lenovo	thinksystem_st650_v2_firmware	Affected: 0 , < 4.11 (custom) cpe:2.3:o:lenovo:thinksystem_st650_v2_firmware:-:::::::*
lenovo	thinksystem_st650_v3_firmware	Affected: 0 , < 4.11 (custom) cpe:2.3:o:lenovo:thinksystem_st650_v3_firmware:-:::::::*
lenovo	thinksystem_st658_v2_firmware	Affected: 0 , < 4.11 (custom) cpe:2.3:o:lenovo:thinksystem_st658_v2_firmware:-:::::::*
lenovo	thinksystem_st658_v3_firmware	Affected: 0 , < 4.11 (custom) cpe:2.3:o:lenovo:thinksystem_st658_v3_firmware:-:::::::*

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "affected": [
          {
            "cpes": [
              "cpe:2.3:o:lenovo:thinkagile_hx5530_firmware:-:*:*:*:*:*:*:*"
            ],
            "defaultStatus": "unknown",
            "product": "thinkagile_hx5530_firmware",
            "vendor": "lenovo",
            "versions": [
              {
                "lessThan": "4.71",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "cpes": [
              "cpe:2.3:o:lenovo:thinkagile_hx7530_firmware:-:*:*:*:*:*:*:*"
            ],
            "defaultStatus": "unknown",
            "product": "thinkagile_hx7530_firmware",
            "vendor": "lenovo",
            "versions": [
              {
                "lessThan": "4.71",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "cpes": [
              "cpe:2.3:o:lenovo:thinkagile_vx3331_firmware:-:*:*:*:*:*:*:*"
            ],
            "defaultStatus": "unknown",
            "product": "thinkagile_vx3331_firmware",
            "vendor": "lenovo",
            "versions": [
              {
                "lessThan": "4.71",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "cpes": [
              "cpe:2.3:o:lenovo:thinkagile_hx_enclosure_certified_node_firmware:-:*:*:*:*:*:*:*"
            ],
            "defaultStatus": "unknown",
            "product": "thinkagile_hx_enclosure_certified_node_firmware",
            "vendor": "lenovo",
            "versions": [
              {
                "lessThan": "4.11",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "cpes": [
              "cpe:2.3:o:lenovo:thinkagile_hx1021_edg_firmware:-:*:*:*:*:*:*:*"
            ],
            "defaultStatus": "unknown",
            "product": "thinkagile_hx1021_edg_firmware",
            "vendor": "lenovo",
            "versions": [
              {
                "lessThan": "4.11",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "cpes": [
              "cpe:2.3:o:lenovo:thinkagile_hx1320_firmware:-:*:*:*:*:*:*:*"
            ],
            "defaultStatus": "unknown",
            "product": "thinkagile_hx1320_firmware",
            "vendor": "lenovo",
            "versions": [
              {
                "lessThan": "9.97",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "cpes": [
              "cpe:2.3:o:lenovo:thinkagile_hx1331_firmware:-:*:*:*:*:*:*:*"
            ],
            "defaultStatus": "unknown",
            "product": "thinkagile_hx1331_firmware",
            "vendor": "lenovo",
            "versions": [
              {
                "lessThan": "4.71",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "cpes": [
              "cpe:2.3:o:lenovo:thinkagile_hx1321_firmware:-:*:*:*:*:*:*:*"
            ],
            "defaultStatus": "unknown",
            "product": "thinkagile_hx1321_firmware",
            "vendor": "lenovo",
            "versions": [
              {
                "lessThan": "9.97",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "cpes": [
              "cpe:2.3:o:lenovo:thinkagile_hx1520-r_firmware:-:*:*:*:*:*:*:*"
            ],
            "defaultStatus": "unknown",
            "product": "thinkagile_hx1520-r_firmware",
            "vendor": "lenovo",
            "versions": [
              {
                "lessThan": "9.97",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "cpes": [
              "cpe:2.3:o:lenovo:thinkagile_hx1521-r_firmware:-:*:*:*:*:*:*:*"
            ],
            "defaultStatus": "unknown",
            "product": "thinkagile_hx1521-r_firmware",
            "vendor": "lenovo",
            "versions": [
              {
                "lessThan": "9.97",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "cpes": [
              "cpe:2.3:o:lenovo:thinkagile_hx2320-e_firmware:-:*:*:*:*:*:*:*"
            ],
            "defaultStatus": "unknown",
            "product": "thinkagile_hx2320-e_firmware",
            "vendor": "lenovo",
            "versions": [
              {
                "lessThan": "9.97",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "cpes": [
              "cpe:2.3:o:lenovo:thinkagile_hx2321_firmware:-:*:*:*:*:*:*:*"
            ],
            "defaultStatus": "unknown",
            "product": "thinkagile_hx2321_firmware",
            "vendor": "lenovo",
            "versions": [
              {
                "lessThan": "9.97",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "cpes": [
              "cpe:2.3:o:lenovo:thinkagile_hx2330_firmware:-:*:*:*:*:*:*:*"
            ],
            "defaultStatus": "unknown",
            "product": "thinkagile_hx2330_firmware",
            "vendor": "lenovo",
            "versions": [
              {
                "lessThan": "4.71",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "cpes": [
              "cpe:2.3:o:lenovo:thinkagile_hx2331_firmware:-:*:*:*:*:*:*:*"
            ],
            "defaultStatus": "unknown",
            "product": "thinkagile_hx2331_firmware",
            "vendor": "lenovo",
            "versions": [
              {
                "lessThan": "4.71",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "cpes": [
              "cpe:2.3:o:lenovo:thinkagile_hx2720-e_firmware:-:*:*:*:*:*:*:*"
            ],
            "defaultStatus": "unknown",
            "product": "thinkagile_hx2720-e_firmware",
            "vendor": "lenovo",
            "versions": [
              {
                "lessThan": "4.11",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "cpes": [
              "cpe:2.3:o:lenovo:thinkagile_hx3320_firmware:-:*:*:*:*:*:*:*"
            ],
            "defaultStatus": "unknown",
            "product": "thinkagile_hx3320_firmware",
            "vendor": "lenovo",
            "versions": [
              {
                "lessThan": "9.97",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "cpes": [
              "cpe:2.3:o:lenovo:thinkagile_hx3321_firmware:-:*:*:*:*:*:*:*"
            ],
            "defaultStatus": "unknown",
            "product": "thinkagile_hx3321_firmware",
            "vendor": "lenovo",
            "versions": [
              {
                "lessThan": "9.97",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "cpes": [
              "cpe:2.3:o:lenovo:thinkagile_hx3330_firmware:-:*:*:*:*:*:*:*"
            ],
            "defaultStatus": "unknown",
            "product": "thinkagile_hx3330_firmware",
            "vendor": "lenovo",
            "versions": [
              {
                "lessThan": "4.71",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "cpes": [
              "cpe:2.3:h:lenovo:thinkagile_hx3331:-:*:*:*:*:*:*:*"
            ],
            "defaultStatus": "unknown",
            "product": "thinkagile_hx3331",
            "vendor": "lenovo",
            "versions": [
              {
                "lessThan": "4.71",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "cpes": [
              "cpe:2.3:o:lenovo:thinkagile_hx3375_firmware:-:*:*:*:*:*:*:*"
            ],
            "defaultStatus": "unknown",
            "product": "thinkagile_hx3375_firmware",
            "vendor": "lenovo",
            "versions": [
              {
                "lessThan": "5.61",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "cpes": [
              "cpe:2.3:o:lenovo:thinkagile_hx3376_firmware:-:*:*:*:*:*:*:*"
            ],
            "defaultStatus": "unknown",
            "product": "thinkagile_hx3376_firmware",
            "vendor": "lenovo",
            "versions": [
              {
                "lessThan": "5.61",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "cpes": [
              "cpe:2.3:o:lenovo:thinkagile_hx3520-g_firmware:-:*:*:*:*:*:*:*"
            ],
            "defaultStatus": "unknown",
            "product": "thinkagile_hx3520-g_firmware",
            "vendor": "lenovo",
            "versions": [
              {
                "lessThan": "9.97",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "cpes": [
              "cpe:2.3:o:lenovo:thinkagile_hx3521-g_firmware:-:*:*:*:*:*:*:*"
            ],
            "defaultStatus": "unknown",
            "product": "thinkagile_hx3521-g_firmware",
            "vendor": "lenovo",
            "versions": [
              {
                "lessThan": "9.97",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "cpes": [
              "cpe:2.3:o:lenovo:thinkagile_hx3720_firmware:-:*:*:*:*:*:*:*"
            ],
            "defaultStatus": "unknown",
            "product": "thinkagile_hx3720_firmware",
            "vendor": "lenovo",
            "versions": [
              {
                "lessThan": "4.11",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "cpes": [
              "cpe:2.3:o:lenovo:thinkagile_hx3721_firmware:-:*:*:*:*:*:*:*"
            ],
            "defaultStatus": "unknown",
            "product": "thinkagile_hx3721_firmware",
            "vendor": "lenovo",
            "versions": [
              {
                "lessThan": "4.11",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "cpes": [
              "cpe:2.3:o:lenovo:thinkagile_hx5520-c_firmware:-:*:*:*:*:*:*:*"
            ],
            "defaultStatus": "unknown",
            "product": "thinkagile_hx5520-c_firmware",
            "vendor": "lenovo",
            "versions": [
              {
                "lessThan": "9.97",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "cpes": [
              "cpe:2.3:o:lenovo:thinkagile_hx5521-c_firmware:-:*:*:*:*:*:*:*"
            ],
            "defaultStatus": "unknown",
            "product": "thinkagile_hx5521-c_firmware",
            "vendor": "lenovo",
            "versions": [
              {
                "lessThan": "9.97",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "cpes": [
              "cpe:2.3:o:lenovo:thinkagile_hx5531_firmware:-:*:*:*:*:*:*:*"
            ],
            "defaultStatus": "unknown",
            "product": "thinkagile_hx5531_firmware",
            "vendor": "lenovo",
            "versions": [
              {
                "lessThan": "4.71",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "cpes": [
              "cpe:2.3:o:lenovo:thinkagile_hx7520_firmware:-:*:*:*:*:*:*:*"
            ],
            "defaultStatus": "unknown",
            "product": "thinkagile_hx7520_firmware",
            "vendor": "lenovo",
            "versions": [
              {
                "lessThan": "9.97",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "cpes": [
              "cpe:2.3:o:lenovo:thinkagile_hx7521_firmware:-:*:*:*:*:*:*:*"
            ],
            "defaultStatus": "unknown",
            "product": "thinkagile_hx7521_firmware",
            "vendor": "lenovo",
            "versions": [
              {
                "lessThan": "9.97",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "cpes": [
              "cpe:2.3:o:lenovo:thinkagile_hx7521_firmware:-:*:*:*:*:*:*:*"
            ],
            "defaultStatus": "unknown",
            "product": "thinkagile_hx7521_firmware",
            "vendor": "lenovo",
            "versions": [
              {
                "lessThan": "9.97",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "cpes": [
              "cpe:2.3:o:lenovo:thinkagile_hx7530_firmware:-:*:*:*:*:*:*:*"
            ],
            "defaultStatus": "unknown",
            "product": "thinkagile_hx7530_firmware",
            "vendor": "lenovo",
            "versions": [
              {
                "lessThan": "4.71",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "cpes": [
              "cpe:2.3:o:lenovo:thinkagile_hx7531_firmware:-:*:*:*:*:*:*:*"
            ],
            "defaultStatus": "unknown",
            "product": "thinkagile_hx7531_firmware",
            "vendor": "lenovo",
            "versions": [
              {
                "lessThan": "4.71",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "cpes": [
              "cpe:2.3:o:lenovo:thinkagile_hx7820_firmware:-:*:*:*:*:*:*:*"
            ],
            "defaultStatus": "unknown",
            "product": "thinkagile_hx7820_firmware",
            "vendor": "lenovo",
            "versions": [
              {
                "lessThan": "3.11",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "cpes": [
              "cpe:2.3:o:lenovo:thinkagile_hx7821_firmware:-:*:*:*:*:*:*:*"
            ],
            "defaultStatus": "unknown",
            "product": "thinkagile_hx7821_firmware",
            "vendor": "lenovo",
            "versions": [
              {
                "lessThan": "3.11",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "cpes": [
              "cpe:2.3:o:lenovo:thinkagile_mx1020_firmware:-:*:*:*:*:*:*:*"
            ],
            "defaultStatus": "unknown",
            "product": "thinkagile_mx1020_firmware",
            "vendor": "lenovo",
            "versions": [
              {
                "lessThan": "4.11",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "cpes": [
              "cpe:2.3:o:lenovo:thinkagile_mx3330-f_firmware:-:*:*:*:*:*:*:*"
            ],
            "defaultStatus": "unknown",
            "product": "thinkagile_mx3330-f_firmware",
            "vendor": "lenovo",
            "versions": [
              {
                "lessThan": "4.71",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "cpes": [
              "cpe:2.3:o:lenovo:thinkagile_mx3330-h_firmware:-:*:*:*:*:*:*:*"
            ],
            "defaultStatus": "unknown",
            "product": "thinkagile_mx3330-h_firmware",
            "vendor": "lenovo",
            "versions": [
              {
                "lessThan": "4.71",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "cpes": [
              "cpe:2.3:o:lenovo:thinkagile_mx3331-f_firmware:-:*:*:*:*:*:*:*"
            ],
            "defaultStatus": "unknown",
            "product": "thinkagile_mx3331-f_firmware",
            "vendor": "lenovo",
            "versions": [
              {
                "lessThan": "4.71",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "cpes": [
              "cpe:2.3:o:lenovo:thinkagile_mx3331-h_firmware:-:*:*:*:*:*:*:*"
            ],
            "defaultStatus": "unknown",
            "product": "thinkagile_mx3331-h_firmware",
            "vendor": "lenovo",
            "versions": [
              {
                "lessThan": "4.71",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "cpes": [
              "cpe:2.3:o:lenovo:thinkagile_mx3530_f_firmware:-:*:*:*:*:*:*:*"
            ],
            "defaultStatus": "unknown",
            "product": "thinkagile_mx3530_f_firmware",
            "vendor": "lenovo",
            "versions": [
              {
                "lessThan": "4.71",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "cpes": [
              "cpe:2.3:o:lenovo:thinkagile_mx3530-h_firmware:-:*:*:*:*:*:*:*"
            ],
            "defaultStatus": "unknown",
            "product": "thinkagile_mx3530-h_firmware",
            "vendor": "lenovo",
            "versions": [
              {
                "lessThan": "4.71",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "cpes": [
              "cpe:2.3:o:lenovo:thinkagile_mx3531-f_firmware:-:*:*:*:*:*:*:*"
            ],
            "defaultStatus": "unknown",
            "product": "thinkagile_mx3531-f_firmware",
            "vendor": "lenovo",
            "versions": [
              {
                "lessThan": "4.71",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "cpes": [
              "cpe:2.3:o:lenovo:thinkagile_vx1320_firmware:-:*:*:*:*:*:*:*"
            ],
            "defaultStatus": "unknown",
            "product": "thinkagile_vx1320_firmware",
            "vendor": "lenovo",
            "versions": [
              {
                "lessThan": "4.11",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "cpes": [
              "cpe:2.3:o:lenovo:thinkagile_vx2320_firmware:-:*:*:*:*:*:*:*"
            ],
            "defaultStatus": "unknown",
            "product": "thinkagile_vx2320_firmware",
            "vendor": "lenovo",
            "versions": [
              {
                "lessThan": "9.97",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "cpes": [
              "cpe:2.3:o:lenovo:thinkagile_vx2330_firmware:-:*:*:*:*:*:*:*"
            ],
            "defaultStatus": "unknown",
            "product": "thinkagile_vx2330_firmware",
            "vendor": "lenovo",
            "versions": [
              {
                "lessThan": "4.71",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "cpes": [
              "cpe:2.3:o:lenovo:thinkagile_vx3320_firmware:-:*:*:*:*:*:*:*"
            ],
            "defaultStatus": "unknown",
            "product": "thinkagile_vx3320_firmware",
            "vendor": "lenovo",
            "versions": [
              {
                "lessThan": "9.97",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "cpes": [
              "cpe:2.3:o:lenovo:thinkagile_vx3330_firmware:-:*:*:*:*:*:*:*"
            ],
            "defaultStatus": "unknown",
            "product": "thinkagile_vx3330_firmware",
            "vendor": "lenovo",
            "versions": [
              {
                "lessThan": "4.71",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "cpes": [
              "cpe:2.3:o:lenovo:thinkagile_vx3520-g_firmware:-:*:*:*:*:*:*:*"
            ],
            "defaultStatus": "unknown",
            "product": "thinkagile_vx3520-g_firmware",
            "vendor": "lenovo",
            "versions": [
              {
                "lessThan": "9.97",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "cpes": [
              "cpe:2.3:o:lenovo:thinkagile_vx3530-g_firmware:-:*:*:*:*:*:*:*"
            ],
            "defaultStatus": "unknown",
            "product": "thinkagile_vx3530-g_firmware",
            "vendor": "lenovo",
            "versions": [
              {
                "lessThan": "4.71",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "cpes": [
              "cpe:2.3:o:lenovo:thinkagile_vx3720_firmware:-:*:*:*:*:*:*:*"
            ],
            "defaultStatus": "unknown",
            "product": "thinkagile_vx3720_firmware",
            "vendor": "lenovo",
            "versions": [
              {
                "lessThan": "4.11",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "cpes": [
              "cpe:2.3:o:lenovo:thinkagile_vx5520_firmware:-:*:*:*:*:*:*:*"
            ],
            "defaultStatus": "unknown",
            "product": "thinkagile_vx5520_firmware",
            "vendor": "lenovo",
            "versions": [
              {
                "lessThan": "9.97",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "cpes": [
              "cpe:2.3:o:lenovo:thinkagile_vx5530_firmware:-:*:*:*:*:*:*:*"
            ],
            "defaultStatus": "unknown",
            "product": "thinkagile_vx5530_firmware",
            "vendor": "lenovo",
            "versions": [
              {
                "lessThan": "4.71",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "cpes": [
              "cpe:2.3:o:lenovo:thinkagile_vx7320_n_firmware:-:*:*:*:*:*:*:*"
            ],
            "defaultStatus": "unknown",
            "product": "thinkagile_vx7320_n_firmware",
            "vendor": "lenovo",
            "versions": [
              {
                "lessThan": "9.97",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "cpes": [
              "cpe:2.3:o:lenovo:thinkagile_vx7330_firmware:-:*:*:*:*:*:*:*"
            ],
            "defaultStatus": "unknown",
            "product": "thinkagile_vx7330_firmware",
            "vendor": "lenovo",
            "versions": [
              {
                "lessThan": "4.71",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "cpes": [
              "cpe:2.3:o:lenovo:thinkagile_vx7520_firmware:-:*:*:*:*:*:*:*"
            ],
            "defaultStatus": "unknown",
            "product": "thinkagile_vx7520_firmware",
            "vendor": "lenovo",
            "versions": [
              {
                "lessThan": "9.97",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "cpes": [
              "cpe:2.3:o:lenovo:thinkagile_vx7520_n_firmware:-:*:*:*:*:*:*:*"
            ],
            "defaultStatus": "unknown",
            "product": "thinkagile_vx7520_n_firmware",
            "vendor": "lenovo",
            "versions": [
              {
                "lessThan": "9.97",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "cpes": [
              "cpe:2.3:o:lenovo:thinkagile_vx7530_firmware:-:*:*:*:*:*:*:*"
            ],
            "defaultStatus": "unknown",
            "product": "thinkagile_vx7530_firmware",
            "vendor": "lenovo",
            "versions": [
              {
                "lessThan": "4.71",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "cpes": [
              "cpe:2.3:o:lenovo:thinkagile_vx7531_firmware:-:*:*:*:*:*:*:*"
            ],
            "defaultStatus": "unknown",
            "product": "thinkagile_vx7531_firmware",
            "vendor": "lenovo",
            "versions": [
              {
                "lessThan": "4.71",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "cpes": [
              "cpe:2.3:o:lenovo:thinkagile_vx7820_firmware:-:*:*:*:*:*:*:*"
            ],
            "defaultStatus": "unknown",
            "product": "thinkagile_vx7820_firmware",
            "vendor": "lenovo",
            "versions": [
              {
                "lessThan": "3.11",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "cpes": [
              "cpe:2.3:o:lenovo:thinkstation_p920_workstation_firmware:-:*:*:*:*:*:*:*"
            ],
            "defaultStatus": "unknown",
            "product": "thinkstation_p920_workstation_firmware",
            "vendor": "lenovo",
            "versions": [
              {
                "lessThan": "9.97",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "cpes": [
              "cpe:2.3:o:lenovo:thinksystem_st250_firmware:-:*:*:*:*:*:*:*"
            ],
            "defaultStatus": "unknown",
            "product": "thinksystem_st250_firmware",
            "vendor": "lenovo",
            "versions": [
              {
                "lessThan": "1.12",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "cpes": [
              "cpe:2.3:o:lenovo:thinksystem_sd530_firmware:-:*:*:*:*:*:*:*"
            ],
            "defaultStatus": "unknown",
            "product": "thinksystem_sd530_firmware",
            "vendor": "lenovo",
            "versions": [
              {
                "lessThan": "4.11",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "cpes": [
              "cpe:2.3:o:lenovo:thinksystem_sd630_v2_firmware:-:*:*:*:*:*:*:*"
            ],
            "defaultStatus": "unknown",
            "product": "thinksystem_sd630_v2_firmware",
            "vendor": "lenovo",
            "versions": [
              {
                "lessThan": "4.11",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "cpes": [
              "cpe:2.3:o:lenovo:thinksystem_sd650_dual_node_tray_firmware:-:*:*:*:*:*:*:*"
            ],
            "defaultStatus": "unknown",
            "product": "thinksystem_sd650_dual_node_tray_firmware",
            "vendor": "lenovo",
            "versions": [
              {
                "lessThan": "4.11",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              },
              {
                "lessThan": "6.36",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "cpes": [
              "cpe:2.3:o:lenovo:thinksystem_sd650-n_v2_firmware:-:*:*:*:*:*:*:*"
            ],
            "defaultStatus": "unknown",
            "product": "thinksystem_sd650-n_v2_firmware",
            "vendor": "lenovo",
            "versions": [
              {
                "lessThan": "4.11",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "cpes": [
              "cpe:2.3:o:lenovo:thinksystem_sd650_v3_firmware:-:*:*:*:*:*:*:*"
            ],
            "defaultStatus": "unknown",
            "product": "thinksystem_sd650_v3_firmware",
            "vendor": "lenovo",
            "versions": [
              {
                "lessThan": "4.11",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "cpes": [
              "cpe:2.3:o:lenovo:thinksystem_sd665_v3_firmware:-:*:*:*:*:*:*:*"
            ],
            "defaultStatus": "unknown",
            "product": "thinksystem_sd665_v3_firmware",
            "vendor": "lenovo",
            "versions": [
              {
                "lessThan": "5.11",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "cpes": [
              "cpe:2.3:o:lenovo:thinksystem_se350_firmware:-:*:*:*:*:*:*:*"
            ],
            "defaultStatus": "unknown",
            "product": "thinksystem_se350_firmware",
            "vendor": "lenovo",
            "versions": [
              {
                "lessThan": "4.11",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "cpes": [
              "cpe:2.3:o:lenovo:thinksystem_sn550_firmware:-:*:*:*:*:*:*:*"
            ],
            "defaultStatus": "unknown",
            "product": "thinksystem_sn550_firmware",
            "vendor": "lenovo",
            "versions": [
              {
                "lessThan": "4.11",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              },
              {
                "lessThan": "6.36",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "cpes": [
              "cpe:2.3:o:lenovo:thinksystem_sn550_v2_firmware:-:*:*:*:*:*:*:*"
            ],
            "defaultStatus": "unknown",
            "product": "thinksystem_sn550_v2_firmware",
            "vendor": "lenovo",
            "versions": [
              {
                "lessThan": "4.11",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "cpes": [
              "cpe:2.3:o:lenovo:thinksystem_sn850_firmware:-:*:*:*:*:*:*:*"
            ],
            "defaultStatus": "unknown",
            "product": "thinksystem_sn850_firmware",
            "vendor": "lenovo",
            "versions": [
              {
                "lessThan": "4.11",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              },
              {
                "lessThan": "6.36",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "cpes": [
              "cpe:2.3:o:lenovo:thinksystem_sr150_firmware:-:*:*:*:*:*:*:*"
            ],
            "defaultStatus": "unknown",
            "product": "thinksystem_sr150_firmware",
            "vendor": "lenovo",
            "versions": [
              {
                "lessThan": "4.11",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "cpes": [
              "cpe:2.3:o:lenovo:thinksystem_sr158_firmware:-:*:*:*:*:*:*:*"
            ],
            "defaultStatus": "unknown",
            "product": "thinksystem_sr158_firmware",
            "vendor": "lenovo",
            "versions": [
              {
                "lessThan": "4.11",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "cpes": [
              "cpe:2.3:o:lenovo:thinksystem_sr250_firmware:-:*:*:*:*:*:*:*"
            ],
            "defaultStatus": "unknown",
            "product": "thinksystem_sr250_firmware",
            "vendor": "lenovo",
            "versions": [
              {
                "lessThan": "4.11",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "cpes": [
              "cpe:2.3:o:lenovo:thinksystem_sr250_v2_firmware:-:*:*:*:*:*:*:*"
            ],
            "defaultStatus": "unknown",
            "product": "thinksystem_sr250_v2_firmware",
            "vendor": "lenovo",
            "versions": [
              {
                "lessThan": "4.11",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "cpes": [
              "cpe:2.3:o:lenovo:thinksystem_sr258_firmware:-:*:*:*:*:*:*:*"
            ],
            "defaultStatus": "unknown",
            "product": "thinksystem_sr258_firmware",
            "vendor": "lenovo",
            "versions": [
              {
                "lessThan": "4.11",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "cpes": [
              "cpe:2.3:o:lenovo:thinksystem_sr258_v2_firmware:-:*:*:*:*:*:*:*"
            ],
            "defaultStatus": "unknown",
            "product": "thinksystem_sr258_v2_firmware",
            "vendor": "lenovo",
            "versions": [
              {
                "lessThan": "4.11",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "cpes": [
              "cpe:2.3:o:lenovo:thinksystem_sr530_firmware:-:*:*:*:*:*:*:*"
            ],
            "defaultStatus": "unknown",
            "product": "thinksystem_sr530_firmware",
            "vendor": "lenovo",
            "versions": [
              {
                "lessThan": "9.97",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "cpes": [
              "cpe:2.3:o:lenovo:thinksystem_sr550_firmware:-:*:*:*:*:*:*:*"
            ],
            "defaultStatus": "unknown",
            "product": "thinksystem_sr550_firmware",
            "vendor": "lenovo",
            "versions": [
              {
                "lessThan": "9.97",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "cpes": [
              "cpe:2.3:o:lenovo:thinksystem_sr570_firmware:-:*:*:*:*:*:*:*"
            ],
            "defaultStatus": "unknown",
            "product": "thinksystem_sr570_firmware",
            "vendor": "lenovo",
            "versions": [
              {
                "lessThan": "9.97",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "cpes": [
              "cpe:2.3:o:lenovo:thinksystem_sr590_firmware:-:*:*:*:*:*:*:*"
            ],
            "defaultStatus": "unknown",
            "product": "thinksystem_sr590_firmware",
            "vendor": "lenovo",
            "versions": [
              {
                "lessThan": "9.97",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "cpes": [
              "cpe:2.3:o:lenovo:thinksystem_sr630_firmware:-:*:*:*:*:*:*:*"
            ],
            "defaultStatus": "unknown",
            "product": "thinksystem_sr630_firmware",
            "vendor": "lenovo",
            "versions": [
              {
                "lessThan": "9.97",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "cpes": [
              "cpe:2.3:o:lenovo:thinksystem_sr630_v2_firmware:-:*:*:*:*:*:*:*"
            ],
            "defaultStatus": "unknown",
            "product": "thinksystem_sr630_v2_firmware",
            "vendor": "lenovo",
            "versions": [
              {
                "lessThan": "4.71",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "cpes": [
              "cpe:2.3:o:lenovo:thinksystem_sr630_v3_firmware:-:*:*:*:*:*:*:*"
            ],
            "defaultStatus": "unknown",
            "product": "thinksystem_sr630_v3_firmware",
            "vendor": "lenovo",
            "versions": [
              {
                "lessThan": "4.51",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "cpes": [
              "cpe:2.3:o:lenovo:thinksystem_sr635_firmware:-:*:*:*:*:*:*:*"
            ],
            "defaultStatus": "unknown",
            "product": "thinksystem_sr635_firmware",
            "vendor": "lenovo",
            "versions": [
              {
                "lessThan": "2.81",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "cpes": [
              "cpe:2.3:o:lenovo:thinksystem_sr645_firmware:-:*:*:*:*:*:*:*"
            ],
            "defaultStatus": "unknown",
            "product": "thinksystem_sr645_firmware",
            "vendor": "lenovo",
            "versions": [
              {
                "lessThan": "5.61",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "cpes": [
              "cpe:2.3:o:lenovo:thinksystem_sr645_v3_firmware:-:*:*:*:*:*:*:*"
            ],
            "defaultStatus": "unknown",
            "product": "thinksystem_sr645_v3_firmware",
            "vendor": "lenovo",
            "versions": [
              {
                "lessThan": "2.81",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "cpes": [
              "cpe:2.3:o:lenovo:thinksystem_sr650_firmware:-:*:*:*:*:*:*:*"
            ],
            "defaultStatus": "unknown",
            "product": "thinksystem_sr650_firmware",
            "vendor": "lenovo",
            "versions": [
              {
                "lessThan": "9.97",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "cpes": [
              "cpe:2.3:o:lenovo:thinksystem_sr650_v2_firmware:-:*:*:*:*:*:*:*"
            ],
            "defaultStatus": "unknown",
            "product": "thinksystem_sr650_v2_firmware",
            "vendor": "lenovo",
            "versions": [
              {
                "lessThan": "4.71",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "cpes": [
              "cpe:2.3:o:lenovo:thinksystem_sr655_v3_firmware:-:*:*:*:*:*:*:*"
            ],
            "defaultStatus": "unknown",
            "product": "thinksystem_sr655_v3_firmware",
            "vendor": "lenovo",
            "versions": [
              {
                "lessThan": "2.81",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "cpes": [
              "cpe:2.3:o:lenovo:thinksystem_sr665_firmware:-:*:*:*:*:*:*:*"
            ],
            "defaultStatus": "unknown",
            "product": "thinksystem_sr665_firmware",
            "vendor": "lenovo",
            "versions": [
              {
                "lessThan": "5.61",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "cpes": [
              "cpe:2.3:o:lenovo:thinksystem_sr665_v3_firmware:-:*:*:*:*:*:*:*"
            ],
            "defaultStatus": "unknown",
            "product": "thinksystem_sr665_v3_firmware",
            "vendor": "lenovo",
            "versions": [
              {
                "lessThan": "5.61",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              },
              {
                "lessThan": "2.81",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "cpes": [
              "cpe:2.3:o:lenovo:thinksystem_sr670_firmware:-:*:*:*:*:*:*:*"
            ],
            "defaultStatus": "unknown",
            "product": "thinksystem_sr670_firmware",
            "vendor": "lenovo",
            "versions": [
              {
                "lessThan": "4.11",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "cpes": [
              "cpe:2.3:o:lenovo:thinksystem_sr670_v2_firmware:-:*:*:*:*:*:*:*"
            ],
            "defaultStatus": "unknown",
            "product": "thinksystem_sr670_v2_firmware",
            "vendor": "lenovo",
            "versions": [
              {
                "lessThan": "4.11",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "cpes": [
              "cpe:2.3:o:lenovo:thinksystem_sr670_v2_firmware:-:*:*:*:*:*:*:*"
            ],
            "defaultStatus": "unknown",
            "product": "thinksystem_sr670_v2_firmware",
            "vendor": "lenovo",
            "versions": [
              {
                "lessThan": "5.11",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "cpes": [
              "cpe:2.3:o:lenovo:thinksystem_sr675_v3_firmware:-:*:*:*:*:*:*:*"
            ],
            "defaultStatus": "unknown",
            "product": "thinksystem_sr675_v3_firmware",
            "vendor": "lenovo",
            "versions": [
              {
                "lessThan": "5.11",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "cpes": [
              "cpe:2.3:o:lenovo:thinksystem_sr850_firmware:-:*:*:*:*:*:*:*"
            ],
            "defaultStatus": "unknown",
            "product": "thinksystem_sr850_firmware",
            "vendor": "lenovo",
            "versions": [
              {
                "lessThan": "6.36",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              },
              {
                "lessThan": "4.11",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "cpes": [
              "cpe:2.3:o:lenovo:thinksystem_sr850_v2_firmware:-:*:*:*:*:*:*:*"
            ],
            "defaultStatus": "unknown",
            "product": "thinksystem_sr850_v2_firmware",
            "vendor": "lenovo",
            "versions": [
              {
                "lessThan": "4.11",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "cpes": [
              "cpe:2.3:o:lenovo:thinksystem_sr850_v3_firmware:-:*:*:*:*:*:*:*"
            ],
            "defaultStatus": "unknown",
            "product": "thinksystem_sr850_v3_firmware",
            "vendor": "lenovo",
            "versions": [
              {
                "lessThan": "1.20",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "cpes": [
              "cpe:2.3:o:lenovo:thinksystem_sr850p_firmware:-:*:*:*:*:*:*:*"
            ],
            "defaultStatus": "unknown",
            "product": "thinksystem_sr850p_firmware",
            "vendor": "lenovo",
            "versions": [
              {
                "lessThan": "6.36",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "cpes": [
              "cpe:2.3:o:lenovo:thinksystem_sr860_firmware:-:*:*:*:*:*:*:*"
            ],
            "defaultStatus": "unknown",
            "product": "thinksystem_sr860_firmware",
            "vendor": "lenovo",
            "versions": [
              {
                "lessThan": "4.11",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "cpes": [
              "cpe:2.3:o:lenovo:thinksystem_sr860_v2_firmware:-:*:*:*:*:*:*:*"
            ],
            "defaultStatus": "unknown",
            "product": "thinksystem_sr860_v2_firmware",
            "vendor": "lenovo",
            "versions": [
              {
                "lessThan": "4.11",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "cpes": [
              "cpe:2.3:o:lenovo:thinksystem_sr860_v3_firmware:-:*:*:*:*:*:*:*"
            ],
            "defaultStatus": "unknown",
            "product": "thinksystem_sr860_v3_firmware",
            "vendor": "lenovo",
            "versions": [
              {
                "lessThan": "1.20",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "cpes": [
              "cpe:2.3:o:lenovo:thinksystem_sr950_firmware:-:*:*:*:*:*:*:*"
            ],
            "defaultStatus": "unknown",
            "product": "thinksystem_sr950_firmware",
            "vendor": "lenovo",
            "versions": [
              {
                "lessThan": "3.11",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "cpes": [
              "cpe:2.3:o:lenovo:thinksystem_st250_firmware:-:*:*:*:*:*:*:*"
            ],
            "defaultStatus": "unknown",
            "product": "thinksystem_st250_firmware",
            "vendor": "lenovo",
            "versions": [
              {
                "lessThan": "4.11",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "cpes": [
              "cpe:2.3:o:lenovo:thinksystem_st250_v2_firmware:-:*:*:*:*:*:*:*"
            ],
            "defaultStatus": "unknown",
            "product": "thinksystem_st250_v2_firmware",
            "vendor": "lenovo",
            "versions": [
              {
                "lessThan": "4.11",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "cpes": [
              "cpe:2.3:o:lenovo:thinksystem_st258_firmware:-:*:*:*:*:*:*:*"
            ],
            "defaultStatus": "unknown",
            "product": "thinksystem_st258_firmware",
            "vendor": "lenovo",
            "versions": [
              {
                "lessThan": "4.11",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "cpes": [
              "cpe:2.3:o:lenovo:thinksystem_st258_v2_firmware:-:*:*:*:*:*:*:*"
            ],
            "defaultStatus": "unknown",
            "product": "thinksystem_st258_v2_firmware",
            "vendor": "lenovo",
            "versions": [
              {
                "lessThan": "4.11",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "cpes": [
              "cpe:2.3:o:lenovo:thinksystem_st550_firmware:-:*:*:*:*:*:*:*"
            ],
            "defaultStatus": "unknown",
            "product": "thinksystem_st550_firmware",
            "vendor": "lenovo",
            "versions": [
              {
                "lessThan": "9.97",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "cpes": [
              "cpe:2.3:o:lenovo:thinksystem_st650_v2_firmware:-:*:*:*:*:*:*:*"
            ],
            "defaultStatus": "unknown",
            "product": "thinksystem_st650_v2_firmware",
            "vendor": "lenovo",
            "versions": [
              {
                "lessThan": "4.11",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "cpes": [
              "cpe:2.3:o:lenovo:thinksystem_st650_v3_firmware:-:*:*:*:*:*:*:*"
            ],
            "defaultStatus": "unknown",
            "product": "thinksystem_st650_v3_firmware",
            "vendor": "lenovo",
            "versions": [
              {
                "lessThan": "4.11",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "cpes": [
              "cpe:2.3:o:lenovo:thinksystem_st658_v2_firmware:-:*:*:*:*:*:*:*"
            ],
            "defaultStatus": "unknown",
            "product": "thinksystem_st658_v2_firmware",
            "vendor": "lenovo",
            "versions": [
              {
                "lessThan": "4.11",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "cpes": [
              "cpe:2.3:o:lenovo:thinksystem_st658_v3_firmware:-:*:*:*:*:*:*:*"
            ],
            "defaultStatus": "unknown",
            "product": "thinksystem_st658_v3_firmware",
            "vendor": "lenovo",
            "versions": [
              {
                "lessThan": "4.11",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          }
        ],
        "metrics": [
          {
            "other": {
              "content": {
                "id": "CVE-2024-38512",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "no"
                  },
                  {
                    "Technical Impact": "total"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2024-07-26T20:39:25.921304Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2024-07-27T17:16:58.109Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      },
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-02T04:12:25.173Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://support.lenovo.com/us/en/product_security/LEN-156781"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "defaultStatus": "unaffected",
          "product": "XClarity Controller",
          "vendor": "Lenovo",
          "versions": [
            {
              "status": "affected",
              "version": "various"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "supportingMedia": [
            {
              "base64": false,
              "type": "text/html",
              "value": "\u003cspan style=\"background-color: rgb(255, 255, 255);\"\u003eA privilege escalation vulnerability was discovered in XCC that could allow an authenticated XCC user with elevated privileges to perform command injection via specially crafted IPMI commands.\u003c/span\u003e"
            }
          ],
          "value": "A privilege escalation vulnerability was discovered in XCC that could allow an authenticated XCC user with elevated privileges to perform command injection via specially crafted IPMI commands."
        }
      ],
      "metrics": [
        {
          "cvssV3_1": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 7.2,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "HIGH",
            "privilegesRequired": "HIGH",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "format": "CVSS",
          "scenarios": [
            {
              "lang": "en",
              "value": "GENERAL"
            }
          ]
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "cweId": "CWE-78",
              "description": "CWE-78 Improper Neutralization of Special Elements used in an OS Command (\u0027OS Command Injection\u0027)",
              "lang": "en",
              "type": "CWE"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2024-07-26T19:45:31.829Z",
        "orgId": "da227ddf-6e25-4b41-b023-0f976dcaca4b",
        "shortName": "lenovo"
      },
      "references": [
        {
          "url": "https://support.lenovo.com/us/en/product_security/LEN-156781"
        }
      ],
      "solutions": [
        {
          "lang": "en",
          "supportingMedia": [
            {
              "base64": false,
              "type": "text/html",
              "value": "Update to the version (or newer) indicated for your model in the Product Impact section in the advisory: \u003ca target=\"_blank\" rel=\"nofollow\" href=\"https://support.lenovo.com/us/en/product_security/LEN-156781\"\u003ehttps://support.lenovo.com/us/en/product_security/LEN-156781\u003c/a\u003e\n\n\u003cbr\u003e"
            }
          ],
          "value": "Update to the version (or newer) indicated for your model in the Product Impact section in the advisory:  https://support.lenovo.com/us/en/product_security/LEN-156781"
        }
      ],
      "source": {
        "discovery": "UNKNOWN"
      },
      "x_generator": {
        "engine": "Vulnogram 0.2.0"
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "da227ddf-6e25-4b41-b023-0f976dcaca4b",
    "assignerShortName": "lenovo",
    "cveId": "CVE-2024-38512",
    "datePublished": "2024-07-26T19:45:31.829Z",
    "dateReserved": "2024-06-18T14:42:40.471Z",
    "dateUpdated": "2024-08-02T04:12:25.173Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

Sightings

Author	Source	Type	Date	Other

Nomenclature

Seen: The vulnerability was mentioned, discussed, or observed by the user.
Confirmed: The vulnerability has been validated from an analyst's perspective.
Published Proof of Concept: A public proof of concept is available for this vulnerability.
Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
Not confirmed: The user expressed doubt about the validity of the vulnerability.
Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.

Detection rules are retrieved from Rulezet.

The MITRE ATT&CK techniques below are AI-generated suggestions, inferred from the description of the vulnerability by the CIRCL/vulnerability-attack-technique-classification-roberta-base model, served locally by ML-Gateway. They have not been verified by an analyst and are provided for guidance only.
The approach is described in our paper Mapping CVEs to MITRE ATT&CK Techniques: A Curated Gold-Set Classifier and the Limits of LLM-Assisted Label Expansion.
Browse all ATT&CK techniques and the vulnerabilities related to each.

Related by attack behaviour

Vulnerabilities whose description is nearest to this one in the vector space of the CIRCL/vulnerability-attack-technique-biencoder model. This is a similarity search over the bi-encoder space (plain cosine), not a classification, and it has no measured accuracy.