TH
Product
Thinkagile Hx2320-e Firmware
13
CVEs
0
On KEV
8.8
Max CVSS
0
New 30D
Severity mix
Critical 0High 8Medium 5Low 0
Watch
Add Thinkagile Hx2320-e Firmware to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2023-25492 | 8.8 | May 1 | A valid, authenticated user may be able to trigger a denial of service of the XCC web user interface or other undefined behavior through a format string injection vulnerability in… Affected: before 8.88_cdi3a4a |
| CVE-2023-0683 | 8.8 | May 1 | A valid, authenticated XCC user with read only access may gain elevated privileges through a specifically crafted API call Affected: before 8.88_cdi3a4a |
| CVE-2023-29057 | 8.8 | Apr 28 | A valid XCC user's local account permissions overrides their active directory permissions under specific configurations Affected: before 8.88_cdi3a4a |
| CVE-2024-38512 | 7.2 | Jul 26 | A privilege escalation vulnerability was discovered in XCC that could allow an authenticated XCC user with elevated privileges to perform command injection via specially crafted… Affected: before 9.97 |
| CVE-2024-38511 | 7.2 | Jul 26 | A privilege escalation vulnerability was discovered in an upload processing functionality of XCC that could allow an authenticated XCC user with elevated privileges to perform… Affected: before 9.97 |
| CVE-2024-38510 | 7.2 | Jul 26 | A privilege escalation vulnerability was discovered in the SSH captive command shell interface that could allow an authenticated XCC user with elevated privileges to perform… Affected: before 9.97 |
| CVE-2024-38509 | 7.2 | Jul 26 | A privilege escalation vulnerability was discovered in XCC that could allow an authenticated XCC user with elevated privileges to execute arbitrary code via a specially crafted… Affected: before 9.97 |
| CVE-2024-38508 | 7.2 | Jul 26 | A privilege escalation vulnerability was discovered in the web interface or SSH captive command shell interface of XCC that could allow an authenticated XCC user with elevated… Affected: before 9.97 |
| CVE-2023-29058 | 6.5 | Apr 28 | A valid, authenticated XCC user with read-only permissions can modify custom user roles on other user accounts and the user trespass message through the XCC CLI Affected: before 8.88_cdi3a4a |
| CVE-2022-34884 | 6.5 | Jan 30 | A buffer overflow exists in the Remote Presence subsystem which can potentially allow valid, authenticated users to cause a recoverable subsystem denial of service Affected: before 8.40-cdi394n |
| CVE-2023-29056 | 5.9 | Apr 28 | A valid LDAP user, under specific conditions, will default to read-only permissions when authenticating into XCC Affected: before 8.88_cdi3a4a |
| CVE-2023-25495 | 4.9 | Apr 28 | A valid, authenticated administrative user can query a web interface API to reveal the configured LDAP client password used by XCC to authenticate to an external LDAP server in… Affected: before 8.88_cdi3a4a |
| CVE-2022-34888 | 4.3 | Jan 30 | The Remote Mount feature can potentially be abused by valid, authenticated users to make connections to internal services that may not normally be accessible to users Affected: before 8.40-cdi394n |
Showing 13