CVE-2023-4607

EPSS 0.43%
Veröffentlicht 25.10.2023 18:17:41
Zuletzt bearbeitet 21.11.2024 08:35:32
Erkennungen
Login

An authenticated XCC user can change permissions for any user through a crafted API command.

Betroffene Produkte Warnungen 0 Metriken 3 CWE 1 Referenzen 4

NVD 136 VulnDex Vulnerability Enrichment 0

Daten sind bereitgestellt durch National Vulnerability Database (NVD)

Lenovo ≫ Thinkagile Hx5530 Firmware Version -

Lenovo ≫ Thinkagile Hx5530 Version -

Lenovo ≫ Thinkagile Hx7530 Firmware Version -

Lenovo ≫ Thinkagile Hx7530 Version -

Lenovo ≫ Thinkagile Vx3331 Firmware Version -

Lenovo ≫ Thinkagile Vx3331 Version -

Lenovo ≫ Thinkagile Hx1331 Firmware Version -

Lenovo ≫ Thinkagile Hx1331 Version -

Lenovo ≫ Thinkagile Hx2330 Firmware Version -

Lenovo ≫ Thinkagile Hx2330 Version -

Lenovo ≫ Thinkagile Hx2331 Firmware Version -

Lenovo ≫ Thinkagile Hx2331 Version -

Lenovo ≫ Thinkagile Hx3330 Firmware Version -

Lenovo ≫ Thinkagile Hx3330 Version -

Lenovo ≫ Thinkagile Hx3331 Firmware Version -

Lenovo ≫ Thinkagile Hx3331 Version -

Lenovo ≫ Thinkagile Hx3331 Firmware Version -

Lenovo ≫ Thinkagile Hx3331 Version -

Lenovo ≫ Thinkagile Hx3375 Firmware Version -

Lenovo ≫ Thinkagile Hx3375 Version -

Lenovo ≫ Thinkagile Hx3376 Firmware Version -

Lenovo ≫ Thinkagile Hx3376 Version -

Lenovo ≫ Thinkagile Hx5531 Firmware Version -

Lenovo ≫ Thinkagile Hx5531 Version -

Lenovo ≫ Thinkagile Hx7530 Firmware Version -

Lenovo ≫ Thinkagile Hx7530 Version -

Lenovo ≫ Thinkagile Hx7531 Firmware Version -

Lenovo ≫ Thinkagile Hx7531 Version -

Lenovo ≫ Thinkagile Hx7531 Firmware Version -

Lenovo ≫ Thinkagile Hx7531 Version -

Lenovo ≫ Thinkagile Mx3330-f All-flash Firmware Version -

Lenovo ≫ Thinkagile Mx3330-f All-flash Version -

Lenovo ≫ Thinkagile Mx3330-h Hybrid Firmware Version -

Lenovo ≫ Thinkagile Mx3330-h Hybrid Version -

Lenovo ≫ Thinkagile Mx3331-f All-flash Firmware Version -

Lenovo ≫ Thinkagile Mx3331-f All-flash Version -

Lenovo ≫ Thinkagile Mx3331-h Hybrid Firmware Version -

Lenovo ≫ Thinkagile Mx3331-h Hybrid Version -

Lenovo ≫ Thinkagile Mx3530 F All Flash Firmware Version -

Lenovo ≫ Thinkagile Mx3530 F All Flash Version -

Lenovo ≫ Thinkagile Mx3530-h Hybrid Firmware Version -

Lenovo ≫ Thinkagile Mx3530-h Hybrid Version -

Lenovo ≫ Thinkagile Mx3531 H Hybrid Firmware Version -

Lenovo ≫ Thinkagile Mx3531 H Hybrid Version -

Lenovo ≫ Thinkagile Mx3531-f All-flash Firmware Version -

Lenovo ≫ Thinkagile Mx3531-f All-flash Version -

Lenovo ≫ Thinkagile Vx2330 Firmware Version -

Lenovo ≫ Thinkagile Vx2330 Version -

Lenovo ≫ Thinkagile Vx3330 Firmware Version -

Lenovo ≫ Thinkagile Vx3330 Version -

Lenovo ≫ Thinkagile Vx3530-g Firmware Version -

Lenovo ≫ Thinkagile Vx3530-g Version -

Lenovo ≫ Thinkagile Vx5530 Firmware Version -

Lenovo ≫ Thinkagile Vx5530 Version -

Lenovo ≫ Thinkagile Vx7330 Firmware Version -

Lenovo ≫ Thinkagile Vx7330 Version -

Lenovo ≫ Thinkagile Vx7530 Firmware Version -

Lenovo ≫ Thinkagile Vx7530 Version -

Lenovo ≫ Thinkagile Vx7531 Firmware Version -

Lenovo ≫ Thinkagile Vx7531 Version -

Lenovo ≫ Thinksystem Sd630 V2 Firmware Version -

Lenovo ≫ Thinksystem Sd630 V2 Version -

Lenovo ≫ Thinksystem Sd650 V2 Firmware Version -

Lenovo ≫ Thinksystem Sd650 V2 Version -

Lenovo ≫ Thinksystem Sd650 V3 Firmware Version -

Lenovo ≫ Thinksystem Sd650-n V2 Firmware Version -

Lenovo ≫ Thinksystem Sd650-n V2 Version -

Lenovo ≫ Thinksystem Sd665 V3 Firmware Version -

Lenovo ≫ Thinksystem Sn550 V2 Firmware Version -

Lenovo ≫ Thinksystem Sn550 V2 Version -

Lenovo ≫ Thinksystem Sr250 Firmware Version -

Lenovo ≫ Thinksystem Sr250 V2 Version -

Lenovo ≫ Thinksystem Sr258 V2 Firmware Version -

Lenovo ≫ Thinksystem Sr258 V2 Version -

Lenovo ≫ Thinksystem Sr630 V2 Firmware Version -

Lenovo ≫ Thinksystem Sr630 V2 Version -

Lenovo ≫ Thinksystem Sr630 V3 Firmware Version -

Lenovo ≫ Thinksystem Sr635 V3 Firmware Version -

Lenovo ≫ Thinksystem Sr645 Firmware Version -

Lenovo ≫ Thinksystem Sr645 Version -

Lenovo ≫ Thinksystem Sr645 V3 Firmware Version -

Lenovo ≫ Thinksystem Sr645 V3 Version -

Lenovo ≫ Thinksystem Sr650 V2 Firmware Version -

Lenovo ≫ Thinksystem Sr650 V2 Version -

Lenovo ≫ Thinksystem Sr650 V3 Firmware Version -

Lenovo ≫ Thinksystem Sr655 V3 Firmware Version -

Lenovo ≫ Thinksystem Sr665 Firmware Version -

Lenovo ≫ Thinksystem Sr665 Version -

Lenovo ≫ Thinksystem Sr665 V3 Firmware Version -

Lenovo ≫ Thinksystem Sr670 Firmware Version -

Lenovo ≫ Thinksystem Sr670 Version -

Lenovo ≫ Thinksystem Sr670 V2 Firmware Version -

Lenovo ≫ Thinksystem Sr670 V2 Version -

Lenovo ≫ Thinksystem Sr675 V3 Firmware Version -

Lenovo ≫ Thinksystem Sr850 V2 Firmware Version -

Lenovo ≫ Thinksystem Sr850 V2 Version -

Lenovo ≫ Thinksystem Sr850 V2 Firmware Version -

Lenovo ≫ Thinksystem Sr850 V2 Version -

Lenovo ≫ Thinksystem Sr850 V3 Firmware Version -

Lenovo ≫ Thinksystem Sr860 V2 Firmware Version -

Lenovo ≫ Thinksystem Sr860 V2 Version -

Lenovo ≫ Thinksystem Sr860 V2 Firmware Version -

Lenovo ≫ Thinksystem Sr860 V2 Version -

Lenovo ≫ Thinksystem Sr860 V3 Firmware Version -

Lenovo ≫ Thinksystem St250 V2 Firmware Version -

Lenovo ≫ Thinksystem St250 V2 Version -

Lenovo ≫ Thinksystem St258 V2 Firmware Version -

Lenovo ≫ Thinksystem St258 V2 Version -

Lenovo ≫ Thinksystem St650 V2 Firmware Version -

Lenovo ≫ Thinksystem St650 V2 Version -

Lenovo ≫ Thinksystem St650 V3 Firmware Version -

Lenovo ≫ Thinksystem St658 V2 Firmware Version -

Lenovo ≫ Thinksystem St658 V2 Version -

Lenovo ≫ Thinksystem St658 V3 Firmware Version -

Lenovo ≫ Thinkagile Hx Enclosure Firmware Version -

Lenovo ≫ Thinkagile Hx Enclosure Version -

Lenovo ≫ Thinkagile Hx1021 Edg Firmware Version -

Lenovo ≫ Thinkagile Hx1021 Edg Version -

Lenovo ≫ Thinkagile Hx1320 Firmware Version -

Lenovo ≫ Thinkagile Hx1320 Version -

Lenovo ≫ Thinkagile Hx1321 Firmware Version -

Lenovo ≫ Thinkagile Hx1321 Version -

Lenovo ≫ Thinkagile Hx1520-r Firmware Version -

Lenovo ≫ Thinkagile Hx1520-r Version -

Lenovo ≫ Thinkagile Hx1521-r Firmware Version -

Lenovo ≫ Thinkagile Hx1521-r Version -

Lenovo ≫ Thinkagile Hx2320-e Firmware Version -

Lenovo ≫ Thinkagile Hx2320-e Version -

Lenovo ≫ Thinkagile Hx2321 Firmware Version -

Lenovo ≫ Thinkagile Hx2321 Version -

Lenovo ≫ Thinkagile Hx2720-e Firmware Version -

Lenovo ≫ Thinkagile Hx2720-e Version -

Lenovo ≫ Thinkagile Hx3320 Firmware Version -

Lenovo ≫ Thinkagile Hx3320 Version -

Lenovo ≫ Thinkagile Hx3321 Firmware Version -

Lenovo ≫ Thinkagile Hx3321 Version -

Lenovo ≫ Thinkagile Hx3520-g Firmware Version -

Lenovo ≫ Thinkagile Hx3520-g Version -

Lenovo ≫ Thinkagile Hx3521-g Firmware Version -

Lenovo ≫ Thinkagile Hx3521-g Version -

Lenovo ≫ Thinkagile Hx3720 Firmware Version -

Lenovo ≫ Thinkagile Hx3720 Version -

Lenovo ≫ Thinkagile Hx3721 Firmware Version -

Lenovo ≫ Thinkagile Hx3721 Version -

Lenovo ≫ Thinkagile Hx5520 Firmware Version -

Lenovo ≫ Thinkagile Hx5520 Version -

Lenovo ≫ Thinkagile Hx5520-c Firmware Version -

Lenovo ≫ Thinkagile Hx5520-c Version -

Lenovo ≫ Thinkagile Hx5521 Firmware Version -

Lenovo ≫ Thinkagile Hx5521 Version -

Lenovo ≫ Thinkagile Hx5521-c Firmware Version -

Lenovo ≫ Thinkagile Hx5521-c Version -

Lenovo ≫ Thinkagile Hx7520 Firmware Version -

Lenovo ≫ Thinkagile Hx7520 Version -

Lenovo ≫ Thinkagile Hx7521 Firmware Version -

Lenovo ≫ Thinkagile Hx7521 Version -

Lenovo ≫ Thinkagile Hx7820 Firmware Version -

Lenovo ≫ Thinkagile Hx7820 Version -

Lenovo ≫ Thinkagile Hx7821 Firmware Version -

Lenovo ≫ Thinkagile Hx7821 Version -

Lenovo ≫ Thinkagile Mx Edge- Mx1020 Firmware Version -

Lenovo ≫ Thinkagile Mx Edge- Mx1020 Version -

Lenovo ≫ Thinkagile Mx630 V3 Firmware Version -

Lenovo ≫ Thinkagile Mx630 V3 Intergrated System Firmware Version -

Lenovo ≫ Thinkagile Mx650 V3 Firmware Version -

Lenovo ≫ Thinkagile Mx650 V3 Intergrated System Firmware Version -

Lenovo ≫ Thinkagile Mx1021 On Se350 Firmware Version -

Lenovo ≫ Thinkagile Mx1021 On Se350 Version -

Lenovo ≫ Thinkagile Mx1021 On Se350 Firmware Version -

Lenovo ≫ Thinkagile Mx1021 On Se350 Version -

Lenovo ≫ Thinkagile Vx 1se Firmware Version -

Lenovo ≫ Thinkagile Vx 1se Version -

Lenovo ≫ Thinkagile Vx 2u4n Firmware Version -

Lenovo ≫ Thinkagile Vx 2u4n Version -

Lenovo ≫ Thinkagile Vx 4u Firmware Version -

Lenovo ≫ Thinkagile Vx 4u Version -

Lenovo ≫ Thinkagile Vx1320 Firmware Version -

Lenovo ≫ Thinkagile Vx1320 Version -

Lenovo ≫ Thinkagile Vx2320 Firmware Version -

Lenovo ≫ Thinkagile Vx2320 Version -

Lenovo ≫ Thinkagile Vx3320 Firmware Version -

Lenovo ≫ Thinkagile Vx3320 Version -

Lenovo ≫ Thinkagile Vx3520-g Firmware Version -

Lenovo ≫ Thinkagile Vx3520-g Version -

Lenovo ≫ Thinkagile Vx3720 Firmware Version -

Lenovo ≫ Thinkagile Vx3720 Version -

Lenovo ≫ Thinkagile Vx5520 Firmware Version -

Lenovo ≫ Thinkagile Vx5520 Version -

Lenovo ≫ Thinkagile Vx7320 N Firmware Version -

Lenovo ≫ Thinkagile Vx7320 N Version -

Lenovo ≫ Thinkagile Vx7520 Firmware Version -

Lenovo ≫ Thinkagile Vx7520 Version -

Lenovo ≫ Thinkagile Vx7520 N Firmware Version -

Lenovo ≫ Thinkagile Vx7520 N Version -

Lenovo ≫ Thinkagile Vx7820 Firmware Version -

Lenovo ≫ Thinkagile Vx7820 Version -

Lenovo ≫ Thinkedge Se450 Firmware Version -

Lenovo ≫ Thinkedge Se450 Version -

Lenovo ≫ Thinksystem Sd530 Firmware Version -

Lenovo ≫ Thinksystem Sd530 Version -

Lenovo ≫ Thinksystem Sd650 Dwc Dual Node Tray Firmware Version -

Lenovo ≫ Thinksystem Sd650 Dwc Dual Node Tray Version -

Lenovo ≫ Thinksystem Sd650 Dual Node Tray Firmware Version -

Lenovo ≫ Thinksystem Sd650 Dual Node Tray Version -

Lenovo ≫ Thinksystem Se350 Firmware Version -

Lenovo ≫ Thinksystem Se350 Version -

Lenovo ≫ Thinksystem Se350 Firmware Version -

Lenovo ≫ Thinksystem Se350 Version -

Lenovo ≫ Thinksystem Sn550 Firmware Version -

Lenovo ≫ Thinksystem Sn550 Version -

Lenovo ≫ Thinksystem Sn550 Firmware Version -

Lenovo ≫ Thinksystem Sn550 Version -

Lenovo ≫ Thinksystem Sn850 Firmware Version -

Lenovo ≫ Thinksystem Sn850 Version -

Lenovo ≫ Thinksystem Sn850 Firmware Version -

Lenovo ≫ Thinksystem Sn850 Version -

Lenovo ≫ Thinksystem Sr150 Firmware Version -

Lenovo ≫ Thinksystem Sr150 Version -

Lenovo ≫ Thinksystem Sr158 Firmware Version -

Lenovo ≫ Thinksystem Sr158 Version -

Lenovo ≫ Thinksystem Sr250 Firmware Version -

Lenovo ≫ Thinksystem Sr250 Version -

Lenovo ≫ Thinksystem Sr258 Firmware Version -

Lenovo ≫ Thinksystem Sr258 Version -

Lenovo ≫ Thinksystem Sr530 Firmware Version -

Lenovo ≫ Thinksystem Sr530 Version -

Lenovo ≫ Thinksystem Sr550 Firmware Version -

Lenovo ≫ Thinksystem Sr550 Version -

Lenovo ≫ Thinksystem Sr570 Firmware Version -

Lenovo ≫ Thinksystem Sr570 Version -

Lenovo ≫ Thinksystem Sr590 Firmware Version -

Lenovo ≫ Thinkserver Sr590 Version -

Lenovo ≫ Thinksystem Sr630 Firmware Version -

Lenovo ≫ Thinksystem Sr630 Version -

Lenovo ≫ Thinksystem Sr650 Firmware Version -

Lenovo ≫ Thinksystem Sr650 Version -

Lenovo ≫ Thinksystem Sr670 Firmware Version -

Lenovo ≫ Thinksystem Sr670 Version -

Lenovo ≫ Thinksystem Sr850 Firmware Version -

Lenovo ≫ Thinksystem Sr850 Version -

Lenovo ≫ Thinksystem Sr850 Firmware Version -

Lenovo ≫ Thinksystem Sr850 Version -

Lenovo ≫ Thinksystem Sr850p Firmware Version -

Lenovo ≫ Thinksystem Sr850p Version -

Lenovo ≫ Thinksystem Sr860 Firmware Version -

Lenovo ≫ Thinksystem Sr860 Version -

Lenovo ≫ Thinksystem Sr860 Firmware Version -

Lenovo ≫ Thinksystem Sr860 Version -

Lenovo ≫ Thinksystem Sr950 Firmware Version -

Lenovo ≫ Thinksystem Sr950 Version -

Lenovo ≫ Thinksystem St250 Firmware Version -

Lenovo ≫ Thinksystem St250 Version -

Lenovo ≫ Thinksystem St258 Firmware Version -

Lenovo ≫ Thinksystem St258 Version -

Lenovo ≫ Thinksystem St550 Firmware Version -

Lenovo ≫ Thinksystem St550 Version -

Zu dieser CVE wurde keine Warnung gefunden.

EPSS Metriken
Typ	Quelle	Score	Percentile
EPSS	FIRST.org	0.43%	0.339

CVSS Metriken
Quelle	Base Score	Exploit Score	Impact Score	Vector String
NIST	8.8	2.8	5.9	CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Lenovo	7.5	1.6	5.9	CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H

CWE-269 Improper Privilege Management

The product does not properly assign, modify, track, or check privileges for an actor, creating an unintended sphere of control for that actor.

https://support.lenovo.com/us/en/product_security/LEN-140960

Vendor Advisory

https://nvd.nist.gov/vuln/detail/CVE-2023-4607

CVE Source (NVD)

https://cveawg.mitre.org/api/cve/CVE-2023-4607

CVE Source (JSON)

https://euvd.enisa.europa.eu/vulnerability/CVE-2023-4607

EUVD

Team-orientierte Vulnerability Management Plattform

Features der Plattform

CVE-2023-4607