TH
Product
Thinkagile HX Enclosure Certified Node Firmware
11
CVEs
0
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 2High 6Medium 3Low 0
Watch
Add Thinkagile HX Enclosure Certified Node Firmware to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2021-3897 | 9.8 | Apr 22 | An authentication bypass vulnerability was discovered in an internal service of the Lenovo Fan Power Controller2 (FPC2) and Lenovo System Management Module (SMM) firmware during… Affected: before tesm28b-1.21 |
| CVE-2021-3849 | 9.8 | Apr 22 | An authentication bypass vulnerability was discovered in the web interface of the Lenovo Fan Power Controller2 (FPC2) and Lenovo System Management Module (SMM) firmware that could… Affected: before tesm28b-1.21 |
| CVE-2023-2992 | 7.5 | Jun 26 | An unauthenticated denial of service vulnerability exists in the SMM v1, SMM v2, and FPC management web server which can be triggered under crafted conditions Affected: before tesm38c-1.26 |
| CVE-2024-38512 | 7.2 | Jul 26 | A privilege escalation vulnerability was discovered in XCC that could allow an authenticated XCC user with elevated privileges to perform command injection via specially crafted… Affected: before 4.11 |
| CVE-2024-38511 | 7.2 | Jul 26 | A privilege escalation vulnerability was discovered in an upload processing functionality of XCC that could allow an authenticated XCC user with elevated privileges to perform… Affected: before 4.11 |
| CVE-2024-38510 | 7.2 | Jul 26 | A privilege escalation vulnerability was discovered in the SSH captive command shell interface that could allow an authenticated XCC user with elevated privileges to perform… Affected: before 4.11 |
| CVE-2024-38509 | 7.2 | Jul 26 | A privilege escalation vulnerability was discovered in XCC that could allow an authenticated XCC user with elevated privileges to execute arbitrary code via a specially crafted… Affected: before 4.11 |
| CVE-2024-38508 | 7.2 | Jul 26 | A privilege escalation vulnerability was discovered in the web interface or SSH captive command shell interface of XCC that could allow an authenticated XCC user with elevated… Affected: before 4.11 |
| CVE-2022-34884 | 6.5 | Jan 30 | A buffer overflow exists in the Remote Presence subsystem which can potentially allow valid, authenticated users to cause a recoverable subsystem denial of service Affected: before 5.20_tei3c8m |
| CVE-2023-2993 | 6.3 | Jun 26 | A valid, authenticated user with limited privileges may be able to use specifically crafted web management server API calls to execute a limited number of commands on SMM v1, SMM… Affected: before tesm38c-1.26 |
| CVE-2022-34888 | 4.3 | Jan 30 | The Remote Mount feature can potentially be abused by valid, authenticated users to make connections to internal services that may not normally be accessible to users Affected: before 5.20_tei3c8m |
Showing 11