Login Request a demo
Medium severity · published Jan 30, 2023
CVE-2022-34888
The Remote Mount feature can potentially be abused by valid, authenticated users to make connections to internal services that may not normally be accessible to users
4.3
CVSS
0.4%
EPSS
No
On KEV
Description
The Remote Mount feature can potentially be abused by valid, authenticated users to make connections to internal services that may not normally be accessible to users. Internal service access controls, as applicable, remain in effect.
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N
Attack vector
Network
Complexity
Low
Privileges
Low
User interaction
None
Confidentiality
Low
Integrity
None
Availability
None
Scope
Unchanged
Exploitation
Is it being used?
Exploit prediction (EPSS)0.4% · higher than 35% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
TH
Thinkagile HX Enclosure Certified Node Firmware · Lenovo
before 5.20_tei3c8m · source: NVD
TH
Thinkagile Hx1021 Firmware · Lenovo
before 3.60_tei386m · source: NVD
TH
Thinkagile Hx1320 Firmware · Lenovo
before 8.40-cdi394n · source: NVD
TH
Thinkagile Hx1321 Firmware · Lenovo
before 8.40-cdi394n · source: NVD
TH
Thinkagile Hx1520-r Firmware · Lenovo
before 8.40-cdi394n · source: NVD
TH
Thinkagile Hx1521-r Firmware · Lenovo
before 8.40-cdi394n · source: NVD
TH
Thinkagile Hx2320-e Firmware · Lenovo
before 8.40-cdi394n · source: NVD
TH
Thinkagile Hx2321 Firmware · Lenovo
before 8.40-cdi394n · source: NVD
TH
Thinkagile Hx2720-e Firmware · Lenovo
before 5.20_tei3c8m · source: NVD
TH
Thinkagile Hx3320 Firmware · Lenovo
before 8.40-cdi394n · source: NVD
TH
Thinkagile Hx3321 Firmware · Lenovo
before 8.40-cdi394n · source: NVD
TH
Thinkagile Hx3375 Firmware · Lenovo
before 4.10_d8bt38l · source: NVD
Affected product
TH
Thinkagile HX Enclosure Certified Node Firmware
Lenovo
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2022-34888
CVE.org
https://www.cve.org/CVERecord?id=CVE-2022-34888
Vendor Advisory
https://support.lenovo.com/us/en/product_security/LEN-87734
More from Thinkagile HX Enclosure Certified Node Firmware
9.8
CVE-2021-3897
An authentication bypass vulnerability was discovered in an internal service of the Lenovo Fan Power Controller2 (FPC2) and Lenovo System Management Module (SMM) firmware during…
9.8
CVE-2021-3849
An authentication bypass vulnerability was discovered in the web interface of the Lenovo Fan Power Controller2 (FPC2) and Lenovo System Management Module (SMM) firmware that could…
7.5
CVE-2023-2992
An unauthenticated  denial of service vulnerability exists in the SMM v1, SMM v2, and FPC management web server which can be triggered under crafted conditions
6.5
CVE-2022-34884
A buffer overflow exists in the Remote Presence subsystem which can potentially allow valid, authenticated users to cause a recoverable subsystem denial of service
6.3
CVE-2023-2993
A valid, authenticated user with limited privileges may be able to use specifically crafted web management server API calls to execute a limited number of commands on SMM v1, SMM…