Lenovo VX3331 Certified Node (ThinkAgile) XCC

• CVE-2024-8281 High 7.2 An input validation weakness was discovered in XCC that could allow a valid, authenticated XCC user with elevated privileges to perform command injection through specially crafted command line input i 1.0%
• CVE-2024-8280 High 7.2 An input validation weakness was discovered in XCC that could allow a valid, authenticated XCC user with elevated privileges to perform command injection or cause a recoverable denial of service using 1.0%
• CVE-2024-8279 High 7.2 A privilege escalation vulnerability was discovered in XCC that could allow a valid, authenticated XCC user with elevated privileges to perform command injection via specially crafted file uploads. 1.1%
• CVE-2024-8278 High 7.2 A privilege escalation vulnerability was discovered in XCC that could allow a valid, authenticated XCC user with elevated privileges to perform command injection via specially crafted IPMI commands. 1.1%
• CVE-2024-8059 Medium 4.3 IPMI credentials may be captured in XCC audit log entries when the account username length is 16 characters. 0.2%