TH
Product
Thinkagile Hx3375 Firmware
11
CVEs
0
On KEV
8.8
Max CVSS
0
New 30D
Severity mix
Critical 0High 6Medium 5Low 0
Watch
Add Thinkagile Hx3375 Firmware to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2023-4607 | 8.8 | Oct 25 | An authenticated XCC user can change permissions for any user through a crafted API command Affected: All versions, or not specified |
| CVE-2023-25492 | 8.8 | May 1 | A valid, authenticated user may be able to trigger a denial of service of the XCC web user interface or other undefined behavior through a format string injection vulnerability in… Affected: before 4.71_d8bt48p |
| CVE-2023-0683 | 8.8 | May 1 | A valid, authenticated XCC user with read only access may gain elevated privileges through a specifically crafted API call Affected: before 4.71_d8bt48p |
| CVE-2023-29057 | 8.8 | Apr 28 | A valid XCC user's local account permissions overrides their active directory permissions under specific configurations Affected: before 4.71_d8bt48p |
| CVE-2023-4606 | 8.1 | Oct 25 | An authenticated XCC user with Read-Only permission can change a different user’s password through a crafted API command. This affects ThinkSystem v2 and v3 servers with XCC;… Affected: All versions, or not specified |
| CVE-2023-4608 | 7.2 | Oct 25 | An authenticated XCC user with elevated privileges can perform blind SQL injection in limited cases through a crafted API command. This affects ThinkSystem v2 and v3 servers… Affected: All versions, or not specified |
Showing 6