Log in Start free

Vulnerability · Published Sep 13, 2024 · Assigned by lenovo

CVE-2024-8059

Medium 4.3

In plain English

A medium-severity security flaw in HX Enclosure Certified Node (ThinkAgile) XCC from Lenovo. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 0.2% (higher than 9% of all known vulnerabilities).

Severity (CVSS 3.1)4.3Medium
Exploit odds (30 days)0.2%top 90.8% of all CVEs
Exploited in the wildNo reportsCISA SSVC: none
Attack toolingNoneno public tooling known

Official description

IPMI credentials may be captured in XCC audit log entries when the account username length is 16 characters.

Affected products (as reported)

VendorProductVersions
Lenovo HX5530 Appliance (ThinkAgile) XCC 0 – before 5.10 AFBT50F
Lenovo HX7530 Appliance (ThinkAgile) XCC 0 – before 5.10 AFBT50F
Lenovo ST250 V3 (ThinkSystem) XCC 0 – before 3.10 CTX318G
Lenovo VX3331 Certified Node (ThinkAgile) XCC 0 – before 5.10 AFBT50F
Lenovo HX Enclosure Certified Node (ThinkAgile) XCC 0 – before 6.40 TEI3F3E
Lenovo HX1021 Edge Certified Node 3yr (ThinkAgile) XCC 0 – before 4.12 TEI3E4D
Lenovo HX1320 Appliance (ThinkAgile) XCC 0 – before 9.98 CDI3B4E
Lenovo HX1321 Certified Node (ThinkAgile) XCC 0 – before 9.98 CDI3B4E
Lenovo HX1331 Certified Node (ThinkAgile) XCC 0 – before 5.10 AFBT50F
Lenovo HX1520-R Appliance (ThinkAgile) XCC 0 – before 9.98 CDI3B4E
Lenovo HX1521-R Certified Node (ThinkAgile) XCC 0 – before 9.98 CDI3B4E
Lenovo HX2320-E Appliance (ThinkAgile) XCC 0 – before 9.98 CDI3B4E
Lenovo HX2321 Certified Node (ThinkAgile) XCC 0 – before 9.98 CDI3B4E
Lenovo HX2330 Appliance (ThinkAgile) XCC 0 – before 5.10 AFBT50F
Lenovo HX2331 Certified Node (ThinkAgile) XCC 0 – before 5.10 AFBT50F
Lenovo HX2720-E Appliance (ThinkAgile) XCC 0 – before 6.40 TEI3F3E
Lenovo HX3320 Appliance (ThinkAgile) XCC 0 – before 9.98 CDI3B4E
Lenovo HX3321 Certified Node (ThinkAgile) XCC 0 – before 9.98 CDI3B4E
Lenovo HX3330 Appliance (ThinkAgile) XCC 0 – before 5.10 AFBT50F
Lenovo HX3331 Certified Node (ThinkAgile) XCC 0 – before 5.10 AFBT50F
Lenovo HX3331 Node SAP HANA (ThinkAgile) XCC 0 – before 5.10 AFBT50F
Lenovo HX3375 Appliance (ThinkAgile) XCC 0 – before 5.80 D8BT66D
Lenovo HX3376 Certified Node (ThinkAgile) XCC 0 – before 5.80 D8BT66D
Lenovo HX3520-G Appliance (ThinkAgile) XCC 0 – before 9.98 CDI3B4E
Lenovo HX3521-G Certified Node (ThinkAgile) XCC 0 – before 9.98 CDI3B4E
Lenovo HX3720 Appliance (ThinkAgile) XCC 0 – before 6.40 TEI3F3E
Lenovo HX3721 Certified Node (ThinkAgile) XCC 0 – before 6.40 TEI3F3E
Lenovo HX5520 Appliance (ThinkAgile) XCC 0 – before 9.98 CDI3B4E
Lenovo HX5520-C Appliance (ThinkAgile) XCC 0 – before 9.98 CDI3B4E
Lenovo HX5521 Certified Node (ThinkAgile) XCC 0 – before 9.98 CDI3B4E

Weakness: CWE-319 · Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N

References