TH
Product
Thinkagile Hx5531 Firmware
15
CVEs
0
On KEV
8.8
Max CVSS
0
New 30D
Severity mix
Critical 0High 12Medium 3Low 0
Watch
Add Thinkagile Hx5531 Firmware to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2023-4607 | 8.8 | Oct 25 | An authenticated XCC user can change permissions for any user through a crafted API command Affected: All versions, or not specified |
| CVE-2023-25492 | 8.8 | May 1 | A valid, authenticated user may be able to trigger a denial of service of the XCC web user interface or other undefined behavior through a format string injection vulnerability in… Affected: before 8.88_cdi3a4a |
| CVE-2023-0683 | 8.8 | May 1 | A valid, authenticated XCC user with read only access may gain elevated privileges through a specifically crafted API call Affected: before 8.88_cdi3a4a |
| CVE-2023-29057 | 8.8 | Apr 28 | A valid XCC user's local account permissions overrides their active directory permissions under specific configurations Affected: before 8.88_cdi3a4a |
| CVE-2023-4606 | 8.1 | Oct 25 | An authenticated XCC user with Read-Only permission can change a different user’s password through a crafted API command. This affects ThinkSystem v2 and v3 servers with XCC;… Affected: All versions, or not specified |
| CVE-2024-38512 | 7.2 | Jul 26 | A privilege escalation vulnerability was discovered in XCC that could allow an authenticated XCC user with elevated privileges to perform command injection via specially crafted… Affected: before 4.71 |
| CVE-2024-38511 | 7.2 | Jul 26 | A privilege escalation vulnerability was discovered in an upload processing functionality of XCC that could allow an authenticated XCC user with elevated privileges to perform… Affected: before 4.71 |
| CVE-2024-38510 | 7.2 | Jul 26 | A privilege escalation vulnerability was discovered in the SSH captive command shell interface that could allow an authenticated XCC user with elevated privileges to perform… Affected: before 4.71 |
| CVE-2024-38509 | 7.2 | Jul 26 | A privilege escalation vulnerability was discovered in XCC that could allow an authenticated XCC user with elevated privileges to execute arbitrary code via a specially crafted… Affected: before 4.71 |
| CVE-2024-38508 | 7.2 | Jul 26 | A privilege escalation vulnerability was discovered in the web interface or SSH captive command shell interface of XCC that could allow an authenticated XCC user with elevated… Affected: before 4.71 |
| CVE-2024-2659 | 7.2 | Apr 15 | A command injection vulnerability was identified in SMM/SMM2 and FPC that could allow an authenticated user with elevated privileges to execute system commands when performing a… Affected: before tesm40b-1.27 |
| CVE-2023-4608 | 7.2 | Oct 25 | An authenticated XCC user with elevated privileges can perform blind SQL injection in limited cases through a crafted API command. This affects ThinkSystem v2 and v3 servers… Affected: All versions, or not specified |
Showing 12