XC
Product
XClarity Controller
9
CVEs
0
On KEV
7.2
Max CVSS
0
New 30D
Severity mix
Critical 0High 5Medium 4Low 0
Watch
Add XClarity Controller to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2024-38512 | 7.2 | Jul 26 | A privilege escalation vulnerability was discovered in XCC that could allow an authenticated XCC user with elevated privileges to perform command injection via specially crafted… Affected: various |
| CVE-2024-38511 | 7.2 | Jul 26 | A privilege escalation vulnerability was discovered in an upload processing functionality of XCC that could allow an authenticated XCC user with elevated privileges to perform… Affected: various |
| CVE-2024-38510 | 7.2 | Jul 26 | A privilege escalation vulnerability was discovered in the SSH captive command shell interface that could allow an authenticated XCC user with elevated privileges to perform… Affected: various |
| CVE-2024-38509 | 7.2 | Jul 26 | A privilege escalation vulnerability was discovered in XCC that could allow an authenticated XCC user with elevated privileges to execute arbitrary code via a specially crafted… Affected: various |
| CVE-2024-38508 | 7.2 | Jul 26 | A privilege escalation vulnerability was discovered in the web interface or SSH captive command shell interface of XCC that could allow an authenticated XCC user with elevated… Affected: various |
| CVE-2019-6187 | 6.5 | Nov 20 | A stored CSV Injection vulnerability was reported in Lenovo XClarity Controller (XCC) that could allow an administrative or other appropriately permissioned user to store… Affected: before tei392m; before cdi340m; before g1i312; before psi328m |
| CVE-2021-3956 | 5.3 | May 18 | A read-only authentication bypass vulnerability was reported in the Third Quarter 2021 release of Lenovo XClarity Controller (XCC) firmware affecting XCC devices configured in… Affected: before 7.22_cdi382o; before 2.32_psi342n; before 3.41_tei382m; before 4.83_tei3c0n; before 1.51_tgbt24l |
| CVE-2021-3473 | 4.9 | Apr 13 | An internal product security audit of Lenovo XClarity Controller (XCC) discovered that the XCC configuration backup/restore password may be written to an internal XCC log buffer… Affected: 6.00_cdi370q; 1.10_tgbt12q; 2.14_psi338i; 4.40_tei3b2p |
| CVE-2019-6195 | 4.8 | Feb 14 | An authorization bypass exists in Lenovo XClarity Controller (XCC) versions prior to 3.08 CDI340V, 3.01 TEI392O, 1.71 PSI328N where a valid authenticated user with lesser… Affected: before 3.01_tei392o; before 3.08_cdi340v; before 1.71_psi328n |
Showing 9