8.8
CVSSv3

CVE-2023-4607

Published: 25/10/2023 Updated: 07/11/2023
CVSS v3 Base Score: 8.8 | Impact Score: 5.9 | Exploitability Score: 2.8
VMScore: 0

Vulnerability Summary

An authenticated XCC user can change permissions for any user through a crafted API command.

Vulnerable Product Search on Vulmon Subscribe to Product

lenovo thinkagile_hx5530_firmware -

lenovo thinkagile_hx7530_firmware -

lenovo thinkagile_vx3331_firmware -

lenovo thinkagile_hx1331_firmware -

lenovo thinkagile_hx2330_firmware -

lenovo thinkagile_hx2331_firmware -

lenovo thinkagile_hx3330_firmware -

lenovo thinkagile_hx3331_firmware -

lenovo thinkagile_hx3375_firmware -

lenovo thinkagile_hx3376_firmware -

lenovo thinkagile_hx5531_firmware -

lenovo thinkagile_hx7531_firmware -

lenovo thinkagile_mx3330-f_all-flash_firmware -

lenovo thinkagile_mx3330-h_hybrid_firmware -

lenovo thinkagile_mx3331-f_all-flash_firmware -

lenovo thinkagile_mx3331-h_hybrid_firmware -

lenovo thinkagile_mx3530_f_all_flash_firmware -

lenovo thinkagile_mx3530-h_hybrid_firmware -

lenovo thinkagile_mx3531_h_hybrid_firmware -

lenovo thinkagile_mx3531-f_all-flash_firmware -

lenovo thinkagile_vx2330_firmware -

lenovo thinkagile_vx3330_firmware -

lenovo thinkagile_vx3530-g_firmware -

lenovo thinkagile_vx5530_firmware -

lenovo thinkagile_vx7330_firmware -

lenovo thinkagile_vx7530_firmware -

lenovo thinkagile_vx7531_firmware -

lenovo thinksystem_sd630_v2_firmware -

lenovo thinksystem_sd650_v2_firmware -

lenovo thinksystem sd650 v3 firmware -

lenovo thinksystem_sd650-n_v2_firmware -

lenovo thinksystem sd665 v3 firmware -

lenovo thinksystem_sn550_v2_firmware -

lenovo thinksystem_sr250_firmware -

lenovo thinksystem_sr258_v2_firmware -

lenovo thinksystem_sr630_v2_firmware -

lenovo thinksystem sr630 v3 firmware -

lenovo thinksystem sr635 v3 firmware -

lenovo thinksystem_sr645_firmware -

lenovo thinksystem_sr645_v3_firmware -

lenovo thinksystem_sr650_v2_firmware -

lenovo thinksystem sr650 v3 firmware -

lenovo thinksystem sr655 v3 firmware -

lenovo thinksystem_sr665_firmware -

lenovo thinksystem sr665 v3 firmware -

lenovo thinksystem_sr670_firmware -

lenovo thinksystem_sr670_v2_firmware -

lenovo thinksystem sr675 v3 firmware -

lenovo thinksystem_sr850_v2_firmware -

lenovo thinksystem sr850 v3 firmware -

lenovo thinksystem_sr860_v2_firmware -

lenovo thinksystem sr860 v3 firmware -

lenovo thinksystem_st250_v2_firmware -

lenovo thinksystem_st258_v2_firmware -

lenovo thinksystem_st650_v2_firmware -

lenovo thinksystem st650 v3 firmware -

lenovo thinksystem_st658_v2_firmware -

lenovo thinksystem st658 v3 firmware -

lenovo thinkagile_hx_enclosure_firmware -

lenovo thinkagile_hx1021_edg_firmware -

lenovo thinkagile_hx1320_firmware -

lenovo thinkagile_hx1321_firmware -

lenovo thinkagile_hx1520-r_firmware -

lenovo thinkagile_hx1521-r_firmware -

lenovo thinkagile_hx2320-e_firmware -

lenovo thinkagile_hx2321_firmware -

lenovo thinkagile_hx2720-e_firmware -

lenovo thinkagile_hx3320_firmware -

lenovo thinkagile_hx3321_firmware -

lenovo thinkagile_hx3520-g_firmware -

lenovo thinkagile_hx3521-g_firmware -

lenovo thinkagile_hx3720_firmware -

lenovo thinkagile_hx3721_firmware -

lenovo thinkagile_hx5520_firmware -

lenovo thinkagile_hx5520-c_firmware -

lenovo thinkagile_hx5521_firmware -

lenovo thinkagile_hx5521-c_firmware -

lenovo thinkagile_hx7520_firmware -

lenovo thinkagile_hx7521_firmware -

lenovo thinkagile_hx7820_firmware -

lenovo thinkagile_hx7821_firmware -

lenovo thinkagile_mx_edge-_mx1020__firmware -

lenovo thinkagile mx630 v3 firmware -

lenovo thinkagile mx630 v3 intergrated system firmware -

lenovo thinkagile mx650 v3 firmware -

lenovo thinkagile mx650 v3 intergrated system firmware -

lenovo thinkagile_mx1021_on_se350_firmware -

lenovo thinkagile_vx_1se_firmware -

lenovo thinkagile_vx_2u4n_firmware -

lenovo thinkagile_vx_4u_firmware -

lenovo thinkagile_vx1320_firmware -

lenovo thinkagile_vx2320_firmware -

lenovo thinkagile_vx3320_firmware -

lenovo thinkagile_vx3520-g_firmware -

lenovo thinkagile_vx3720_firmware -

lenovo thinkagile_vx5520_firmware -

lenovo thinkagile_vx7320_n_firmware -

lenovo thinkagile_vx7520_firmware -

lenovo thinkagile_vx7520_n_firmware -

lenovo thinkagile_vx7820_firmware -

lenovo thinkedge_se450__firmware -

lenovo thinksystem_sd530_firmware -

lenovo thinksystem_sd650_dwc_dual_node_tray_firmware -

lenovo thinksystem_sd650_dual_node_tray_firmware -

lenovo thinksystem_se350_firmware -

lenovo thinksystem_sn550_firmware -

lenovo thinksystem_sn850_firmware -

lenovo thinksystem_sr150_firmware -

lenovo thinksystem_sr158_firmware -

lenovo thinksystem_sr258_firmware -

lenovo thinksystem_sr530_firmware -

lenovo thinksystem_sr550_firmware -

lenovo thinksystem_sr570_firmware -

lenovo thinksystem_sr590_firmware -

lenovo thinksystem_sr630_firmware -

lenovo thinksystem_sr650_firmware -

lenovo thinksystem_sr850_firmware -

lenovo thinksystem_sr850p_firmware -

lenovo thinksystem_sr860_firmware -

lenovo thinksystem_sr950_firmware -

lenovo thinksystem_st250_firmware -

lenovo thinksystem_st258_firmware -

lenovo thinksystem_st550_firmware -