TH
Product
Thinkagile HX Enclosure Firmware
8
CVEs
0
On KEV
8.8
Max CVSS
0
New 30D
Severity mix
Critical 0High 5Medium 3Low 0
Watch
Add Thinkagile HX Enclosure Firmware to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2023-4607 | 8.8 | Oct 25 | An authenticated XCC user can change permissions for any user through a crafted API command Affected: All versions, or not specified |
| CVE-2023-25492 | 8.8 | May 1 | A valid, authenticated user may be able to trigger a denial of service of the XCC web user interface or other undefined behavior through a format string injection vulnerability in… Affected: before 3.72_tei388s |
| CVE-2023-0683 | 8.8 | May 1 | A valid, authenticated XCC user with read only access may gain elevated privileges through a specifically crafted API call Affected: before 3.72_tei388s |
| CVE-2023-29057 | 8.8 | Apr 28 | A valid XCC user's local account permissions overrides their active directory permissions under specific configurations Affected: before 3.72_tei388s |
| CVE-2024-2659 | 7.2 | Apr 15 | A command injection vulnerability was identified in SMM/SMM2 and FPC that could allow an authenticated user with elevated privileges to execute system commands when performing a… Affected: before tesm40b-1.27 |
Showing 5