7.2
HIGH
CVSS 3.1
CVE-2024-38508
XCC Command Injection Privilege Escalation
Overview
Description
A privilege escalation vulnerability was discovered in the web interface or SSH captive command shell interface of XCC that could allow an authenticated XCC user with elevated privileges to perform command injection via a specially crafted request.
Details
INFO
Published Date :
July 26, 2024, 8:15 p.m.
Last Modified :
June 17, 2026, 7:40 a.m.
Remotely Exploit :
Yes !
Source :
[email protected]
Impact
Affected Products
The following products are affected by CVE-2024-38508
vulnerability.
Even if cvefeed.io is aware of the exact versions of the
products
that
are
affected, the information is not represented in the table below.
Scoring
CVSS Scores
The Common Vulnerability Scoring System is a standardized framework
for assessing the severity of vulnerabilities in software and systems.
We collect and displays CVSS scores from various sources for each CVE.
| Score | Version | Severity | Vector | Exploitability Score | Impact Score | Source |
|---|---|---|---|---|---|---|
| CVSS | 134c704f-9b21-4f2e-91b3-4a467353bcc0 | |||||
| CVSS 3.1 | HIGH | [email protected] |
References
References to Advisories, Solutions, and Tools
Here, you will find a curated list of external links that provide in-depth
information, practical solutions, and valuable tools related to
CVE-2024-38508.
| URL | Resource |
|---|---|
| https://support.lenovo.com/us/en/product_security/LEN-156781 | |
| https://support.lenovo.com/us/en/product_security/LEN-156781 |
CWE - Common Weakness Enumeration
While CVE identifies
specific instances of vulnerabilities, CWE categorizes the common flaws or
weaknesses that can lead to vulnerabilities. CVE-2024-38508 is
associated with the following CWEs:
Common Attack Pattern Enumeration and Classification (CAPEC)
Common Attack Pattern Enumeration and Classification
(CAPEC)
stores attack patterns, which are descriptions of the common attributes and
approaches employed by adversaries to exploit the CVE-2024-38508
weaknesses.
CAPEC-6: Argument Injection Argument Injection
CAPEC-15: Command Delimiters Command Delimiters
CAPEC-43: Exploiting Multiple Input Interpretation Layers Exploiting Multiple Input Interpretation Layers
CAPEC-88: OS Command Injection OS Command Injection
CAPEC-108: Command Line Execution through SQL Injection Command Line Execution through SQL Injection
We scan GitHub repositories to detect new proof-of-concept exploits. Following list is a collection of public exploits and proof-of-concepts, which have been published on GitHub (sorted by the most recently updated).
Results are limited to the first 15 repositories due to potential performance issues.
The following list is the news that have been mention
CVE-2024-38508 vulnerability anywhere in the article.
The following table lists the changes that have been made to the
CVE-2024-38508 vulnerability over time.
Vulnerability history details can be useful for understanding the evolution of a vulnerability, and for identifying the most recent changes that may impact the vulnerability's severity, exploitability, or other characteristics.
-
CVE Modified by 134c704f-9b21-4f2e-91b3-4a467353bcc0
Jun. 17, 2026
Action Type Old Value New Value Added Affected [{'cpes': ['cpe:2.3:o:lenovo:thinkagile_hx5530_firmware:-:*:*:*:*:*:*:*'], 'vendor': 'lenovo', 'product': 'thinkagile_hx5530_firmware', 'versions': [{'status': 'affected', 'version': '0', 'lessThan': '4.71', 'versionType': 'custom'}], 'defaultStatus': 'unknown'}, {'cpes': ['cpe:2.3:o:lenovo:thinkagile_hx7530_firmware:-:*:*:*:*:*:*:*'], 'vendor': 'lenovo', 'product': 'thinkagile_hx7530_firmware', 'versions': [{'status': 'affected', 'version': '0', 'lessThan': '4.71', 'versionType': 'custom'}], 'defaultStatus': 'unknown'}, {'cpes': ['cpe:2.3:o:lenovo:thinkagile_vx3331_firmware:-:*:*:*:*:*:*:*'], 'vendor': 'lenovo', 'product': 'thinkagile_vx3331_firmware', 'versions': [{'status': 'affected', 'version': '0', 'lessThan': '4.71', 'versionType': 'custom'}], 'defaultStatus': 'unknown'}, {'cpes': ['cpe:2.3:o:lenovo:thinkagile_hx_enclosure_certified_node_firmware:-:*:*:*:*:*:*:*'], 'vendor': 'lenovo', 'product': 'thinkagile_hx_enclosure_certified_node_firmware', 'versions': [{'status': 'affected', 'version': '0', 'lessThan': '4.11', 'versionType': 'custom'}], 'defaultStatus': 'unknown'}, {'cpes': ['cpe:2.3:o:lenovo:thinkagile_hx1021_edg_firmware:-:*:*:*:*:*:*:*'], 'vendor': 'lenovo', 'product': 'thinkagile_hx1021_edg_firmware', 'versions': [{'status': 'affected', 'version': '0', 'lessThan': '4.11', 'versionType': 'custom'}], 'defaultStatus': 'unknown'}, {'cpes': ['cpe:2.3:o:lenovo:thinkagile_hx1320_firmware:-:*:*:*:*:*:*:*'], 'vendor': 'lenovo', 'product': 'thinkagile_hx1320_firmware', 'versions': [{'status': 'affected', 'version': '0', 'lessThan': '9.97', 'versionType': 'custom'}], 'defaultStatus': 'unknown'}, {'cpes': ['cpe:2.3:o:lenovo:thinkagile_hx1331_firmware:-:*:*:*:*:*:*:*'], 'vendor': 'lenovo', 'product': 'thinkagile_hx1331_firmware', 'versions': [{'status': 'affected', 'version': '0', 'lessThan': '4.71', 'versionType': 'custom'}], 'defaultStatus': 'unknown'}, {'cpes': ['cpe:2.3:o:lenovo:thinkagile_hx1321_firmware:-:*:*:*:*:*:*:*'], 'vendor': 'lenovo', 'product': 'thinkagile_hx1321_firmware', 'versions': [{'status': 'affected', 'version': '0', 'lessThan': '9.97', 'versionType': 'custom'}], 'defaultStatus': 'unknown'}, {'cpes': ['cpe:2.3:o:lenovo:thinkagile_hx1520-r_firmware:-:*:*:*:*:*:*:*'], 'vendor': 'lenovo', 'product': 'thinkagile_hx1520-r_firmware', 'versions': [{'status': 'affected', 'version': '0', 'lessThan': '9.97', 'versionType': 'custom'}], 'defaultStatus': 'unknown'}, {'cpes': ['cpe:2.3:o:lenovo:thinkagile_hx1521-r_firmware:-:*:*:*:*:*:*:*'], 'vendor': 'lenovo', 'product': 'thinkagile_hx1521-r_firmware', 'versions': [{'status': 'affected', 'version': '0', 'lessThan': '9.97', 'versionType': 'custom'}], 'defaultStatus': 'unknown'}, {'cpes': ['cpe:2.3:o:lenovo:thinkagile_hx2320-e_firmware:-:*:*:*:*:*:*:*'], 'vendor': 'lenovo', 'product': 'thinkagile_hx2320-e_firmware', 'versions': [{'status': 'affected', 'version': '0', 'lessThan': '9.97', 'versionType': 'custom'}], 'defaultStatus': 'unknown'}, {'cpes': ['cpe:2.3:o:lenovo:thinkagile_hx2321_firmware:-:*:*:*:*:*:*:*'], 'vendor': 'lenovo', 'product': 'thinkagile_hx2321_firmware', 'versions': [{'status': 'affected', 'version': '0', 'lessThan': '9.97', 'versionType': 'custom'}], 'defaultStatus': 'unknown'}, {'cpes': ['cpe:2.3:o:lenovo:thinkagile_hx2330_firmware:-:*:*:*:*:*:*:*'], 'vendor': 'lenovo', 'product': 'thinkagile_hx2330_firmware', 'versions': [{'status': 'affected', 'version': '0', 'lessThan': '4.71', 'versionType': 'custom'}], 'defaultStatus': 'unknown'}, {'cpes': ['cpe:2.3:o:lenovo:thinkagile_hx2331_firmware:-:*:*:*:*:*:*:*'], 'vendor': 'lenovo', 'product': 'thinkagile_hx2331_firmware', 'versions': [{'status': 'affected', 'version': '0', 'lessThan': '4.71', 'versionType': 'custom'}], 'defaultStatus': 'unknown'}, {'cpes': ['cpe:2.3:o:lenovo:thinkagile_hx2720-e_firmware:-:*:*:*:*:*:*:*'], 'vendor': 'lenovo', 'product': 'thinkagile_hx2720-e_firmware', 'versions': [{'status': 'affected', 'version': '0', 'lessThan': '4.11', 'versionType': 'custom'}], 'defaultStatus': 'unknown'}, {'cpes': ['cpe:2.3:o:lenovo:thinkagile_hx3320_firmware:-:*:*:*:*:*:*:*'], 'vendor': 'lenovo', 'product': 'thinkagile_hx3320_firmware', 'versions': [{'status': 'affected', 'version': '0', 'lessThan': '9.97', 'versionType': 'custom'}], 'defaultStatus': 'unknown'}, {'cpes': ['cpe:2.3:o:lenovo:thinkagile_hx3321_firmware:-:*:*:*:*:*:*:*'], 'vendor': 'lenovo', 'product': 'thinkagile_hx3321_firmware', 'versions': [{'status': 'affected', 'version': '0', 'lessThan': '9.97', 'versionType': 'custom'}], 'defaultStatus': 'unknown'}, {'cpes': ['cpe:2.3:o:lenovo:thinkagile_hx3330_firmware:-:*:*:*:*:*:*:*'], 'vendor': 'lenovo', 'product': 'thinkagile_hx3330_firmware', 'versions': [{'status': 'affected', 'version': '0', 'lessThan': '4.71', 'versionType': 'custom'}], 'defaultStatus': 'unknown'}, {'cpes': ['cpe:2.3:h:lenovo:thinkagile_hx3331:-:*:*:*:*:*:*:*'], 'vendor': 'lenovo', 'product': 'thinkagile_hx3331', 'versions': [{'status': 'affected', 'version': '0', 'lessThan': '4.71', 'versionType': 'custom'}], 'defaultStatus': 'unknown'}, {'cpes': ['cpe:2.3:o:lenovo:thinkagile_hx3375_firmware:-:*:*:*:*:*:*:*'], 'vendor': 'lenovo', 'product': 'thinkagile_hx3375_firmware', 'versions': [{'status': 'affected', 'version': '0', 'lessThan': '5.61', 'versionType': 'custom'}], 'defaultStatus': 'unknown'}, {'cpes': ['cpe:2.3:o:lenovo:thinkagile_hx3376_firmware:-:*:*:*:*:*:*:*'], 'vendor': 'lenovo', 'product': 'thinkagile_hx3376_firmware', 'versions': [{'status': 'affected', 'version': '0', 'lessThan': '5.61', 'versionType': 'custom'}], 'defaultStatus': 'unknown'}, {'cpes': ['cpe:2.3:o:lenovo:thinkagile_hx3520-g_firmware:-:*:*:*:*:*:*:*'], 'vendor': 'lenovo', 'product': 'thinkagile_hx3520-g_firmware', 'versions': [{'status': 'affected', 'version': '0', 'lessThan': '9.97', 'versionType': 'custom'}], 'defaultStatus': 'unknown'}, {'cpes': ['cpe:2.3:o:lenovo:thinkagile_hx3521-g_firmware:-:*:*:*:*:*:*:*'], 'vendor': 'lenovo', 'product': 'thinkagile_hx3521-g_firmware', 'versions': [{'status': 'affected', 'version': '0', 'lessThan': '9.97', 'versionType': 'custom'}], 'defaultStatus': 'unknown'}, {'cpes': ['cpe:2.3:o:lenovo:thinkagile_hx3720_firmware:-:*:*:*:*:*:*:*'], 'vendor': 'lenovo', 'product': 'thinkagile_hx3720_firmware', 'versions': [{'status': 'affected', 'version': '0', 'lessThan': '4.11', 'versionType': 'custom'}], 'defaultStatus': 'unknown'}, {'cpes': ['cpe:2.3:o:lenovo:thinkagile_hx3721_firmware:-:*:*:*:*:*:*:*'], 'vendor': 'lenovo', 'product': 'thinkagile_hx3721_firmware', 'versions': [{'status': 'affected', 'version': '0', 'lessThan': '4.11', 'versionType': 'custom'}], 'defaultStatus': 'unknown'}, {'cpes': ['cpe:2.3:o:lenovo:thinkagile_hx5520-c_firmware:-:*:*:*:*:*:*:*'], 'vendor': 'lenovo', 'product': 'thinkagile_hx5520-c_firmware', 'versions': [{'status': 'affected', 'version': '0', 'lessThan': '9.97', 'versionType': 'custom'}], 'defaultStatus': 'unknown'}, {'cpes': ['cpe:2.3:o:lenovo:thinkagile_hx5521-c_firmware:-:*:*:*:*:*:*:*'], 'vendor': 'lenovo', 'product': 'thinkagile_hx5521-c_firmware', 'versions': [{'status': 'affected', 'version': '0', 'lessThan': '9.97', 'versionType': 'custom'}], 'defaultStatus': 'unknown'}, {'cpes': ['cpe:2.3:o:lenovo:thinkagile_hx5531_firmware:-:*:*:*:*:*:*:*'], 'vendor': 'lenovo', 'product': 'thinkagile_hx5531_firmware', 'versions': [{'status': 'affected', 'version': '0', 'lessThan': '4.71', 'versionType': 'custom'}], 'defaultStatus': 'unknown'}, {'cpes': ['cpe:2.3:o:lenovo:thinkagile_hx7520_firmware:-:*:*:*:*:*:*:*'], 'vendor': 'lenovo', 'product': 'thinkagile_hx7520_firmware', 'versions': [{'status': 'affected', 'version': '0', 'lessThan': '9.97', 'versionType': 'custom'}], 'defaultStatus': 'unknown'}, {'cpes': ['cpe:2.3:o:lenovo:thinkagile_hx7521_firmware:-:*:*:*:*:*:*:*'], 'vendor': 'lenovo', 'product': 'thinkagile_hx7521_firmware', 'versions': [{'status': 'affected', 'version': '0', 'lessThan': '9.97', 'versionType': 'custom'}], 'defaultStatus': 'unknown'}, {'cpes': ['cpe:2.3:o:lenovo:thinkagile_hx7521_firmware:-:*:*:*:*:*:*:*'], 'vendor': 'lenovo', 'product': 'thinkagile_hx7521_firmware', 'versions': [{'status': 'affected', 'version': '0', 'lessThan': '9.97', 'versionType': 'custom'}], 'defaultStatus': 'unknown'}, {'cpes': ['cpe:2.3:o:lenovo:thinkagile_hx7530_firmware:-:*:*:*:*:*:*:*'], 'vendor': 'lenovo', 'product': 'thinkagile_hx7530_firmware', 'versions': [{'status': 'affected', 'version': '0', 'lessThan': '4.71', 'versionType': 'custom'}], 'defaultStatus': 'unknown'}, {'cpes': ['cpe:2.3:o:lenovo:thinkagile_hx7531_firmware:-:*:*:*:*:*:*:*'], 'vendor': 'lenovo', 'product': 'thinkagile_hx7531_firmware', 'versions': [{'status': 'affected', 'version': '0', 'lessThan': '4.71', 'versionType': 'custom'}], 'defaultStatus': 'unknown'}, {'cpes': ['cpe:2.3:o:lenovo:thinkagile_hx7820_firmware:-:*:*:*:*:*:*:*'], 'vendor': 'lenovo', 'product': 'thinkagile_hx7820_firmware', 'versions': [{'status': 'affected', 'version': '0', 'lessThan': '3.11', 'versionType': 'custom'}], 'defaultStatus': 'unknown'}, {'cpes': ['cpe:2.3:o:lenovo:thinkagile_hx7821_firmware:-:*:*:*:*:*:*:*'], 'vendor': 'lenovo', 'product': 'thinkagile_hx7821_firmware', 'versions': [{'status': 'affected', 'version': '0', 'lessThan': '3.11', 'versionType': 'custom'}], 'defaultStatus': 'unknown'}, {'cpes': ['cpe:2.3:o:lenovo:thinkagile_mx1020_firmware:-:*:*:*:*:*:*:*'], 'vendor': 'lenovo', 'product': 'thinkagile_mx1020_firmware', 'versions': [{'status': 'affected', 'version': '0', 'lessThan': '4.11', 'versionType': 'custom'}], 'defaultStatus': 'unknown'}, {'cpes': ['cpe:2.3:o:lenovo:thinkagile_mx3330-f_firmware:-:*:*:*:*:*:*:*'], 'vendor': 'lenovo', 'product': 'thinkagile_mx3330-f_firmware', 'versions': [{'status': 'affected', 'version': '0', 'lessThan': '4.71', 'versionType': 'custom'}], 'defaultStatus': 'unknown'}, {'cpes': ['cpe:2.3:o:lenovo:thinkagile_mx3330-h_firmware:-:*:*:*:*:*:*:*'], 'vendor': 'lenovo', 'product': 'thinkagile_mx3330-h_firmware', 'versions': [{'status': 'affected', 'version': '0', 'lessThan': '4.71', 'versionType': 'custom'}], 'defaultStatus': 'unknown'}, {'cpes': ['cpe:2.3:o:lenovo:thinkagile_mx3331-f_firmware:-:*:*:*:*:*:*:*'], 'vendor': 'lenovo', 'product': 'thinkagile_mx3331-f_firmware', 'versions': [{'status': 'affected', 'version': '0', 'lessThan': '4.71', 'versionType': 'custom'}], 'defaultStatus': 'unknown'}, {'cpes': ['cpe:2.3:o:lenovo:thinkagile_mx3331-h_firmware:-:*:*:*:*:*:*:*'], 'vendor': 'lenovo', 'product': 'thinkagile_mx3331-h_firmware', 'versions': [{'status': 'affected', 'version': '0', 'lessThan': '4.71', 'versionType': 'custom'}], 'defaultStatus': 'unknown'}, {'cpes': ['cpe:2.3:o:lenovo:thinkagile_mx3530_f_firmware:-:*:*:*:*:*:*:*'], 'vendor': 'lenovo', 'product': 'thinkagile_mx3530_f_firmware', 'versions': [{'status': 'affected', 'version': '0', 'lessThan': '4.71', 'versionType': 'custom'}], 'defaultStatus': 'unknown'}, {'cpes': ['cpe:2.3:o:lenovo:thinkagile_mx3530-h_firmware:-:*:*:*:*:*:*:*'], 'vendor': 'lenovo', 'product': 'thinkagile_mx3530-h_firmware', 'versions': [{'status': 'affected', 'version': '0', 'lessThan': '4.71', 'versionType': 'custom'}], 'defaultStatus': 'unknown'}, {'cpes': ['cpe:2.3:o:lenovo:thinkagile_mx3531-f_firmware:-:*:*:*:*:*:*:*'], 'vendor': 'lenovo', 'product': 'thinkagile_mx3531-f_firmware', 'versions': [{'status': 'affected', 'version': '0', 'lessThan': '4.71', 'versionType': 'custom'}], 'defaultStatus': 'unknown'}, {'cpes': ['cpe:2.3:o:lenovo:thinkagile_vx1320_firmware:-:*:*:*:*:*:*:*'], 'vendor': 'lenovo', 'product': 'thinkagile_vx1320_firmware', 'versions': [{'status': 'affected', 'version': '0', 'lessThan': '4.11', 'versionType': 'custom'}], 'defaultStatus': 'unknown'}, {'cpes': ['cpe:2.3:o:lenovo:thinkagile_vx2320_firmware:-:*:*:*:*:*:*:*'], 'vendor': 'lenovo', 'product': 'thinkagile_vx2320_firmware', 'versions': [{'status': 'affected', 'version': '0', 'lessThan': '9.97', 'versionType': 'custom'}], 'defaultStatus': 'unknown'}, {'cpes': ['cpe:2.3:o:lenovo:thinkagile_vx2330_firmware:-:*:*:*:*:*:*:*'], 'vendor': 'lenovo', 'product': 'thinkagile_vx2330_firmware', 'versions': [{'status': 'affected', 'version': '0', 'lessThan': '4.71', 'versionType': 'custom'}], 'defaultStatus': 'unknown'}, {'cpes': ['cpe:2.3:o:lenovo:thinkagile_vx3320_firmware:-:*:*:*:*:*:*:*'], 'vendor': 'lenovo', 'product': 'thinkagile_vx3320_firmware', 'versions': [{'status': 'affected', 'version': '0', 'lessThan': '9.97', 'versionType': 'custom'}], 'defaultStatus': 'unknown'}, {'cpes': ['cpe:2.3:o:lenovo:thinkagile_vx3330_firmware:-:*:*:*:*:*:*:*'], 'vendor': 'lenovo', 'product': 'thinkagile_vx3330_firmware', 'versions': [{'status': 'affected', 'version': '0', 'lessThan': '4.71', 'versionType': 'custom'}], 'defaultStatus': 'unknown'}, {'cpes': ['cpe:2.3:o:lenovo:thinkagile_vx3520-g_firmware:-:*:*:*:*:*:*:*'], 'vendor': 'lenovo', 'product': 'thinkagile_vx3520-g_firmware', 'versions': [{'status': 'affected', 'version': '0', 'lessThan': '9.97', 'versionType': 'custom'}], 'defaultStatus': 'unknown'}, {'cpes': ['cpe:2.3:o:lenovo:thinkagile_vx3530-g_firmware:-:*:*:*:*:*:*:*'], 'vendor': 'lenovo', 'product': 'thinkagile_vx3530-g_firmware', 'versions': [{'status': 'affected', 'version': '0', 'lessThan': '4.71', 'versionType': 'custom'}], 'defaultStatus': 'unknown'}, {'cpes': ['cpe:2.3:o:lenovo:thinkagile_vx3720_firmware:-:*:*:*:*:*:*:*'], 'vendor': 'lenovo', 'product': 'thinkagile_vx3720_firmware', 'versions': [{'status': 'affected', 'version': '0', 'lessThan': '4.11', 'versionType': 'custom'}], 'defaultStatus': 'unknown'}, {'cpes': ['cpe:2.3:o:lenovo:thinkagile_vx5520_firmware:-:*:*:*:*:*:*:*'], 'vendor': 'lenovo', 'product': 'thinkagile_vx5520_firmware', 'versions': [{'status': 'affected', 'version': '0', 'lessThan': '9.97', 'versionType': 'custom'}], 'defaultStatus': 'unknown'}, {'cpes': ['cpe:2.3:o:lenovo:thinkagile_vx5530_firmware:-:*:*:*:*:*:*:*'], 'vendor': 'lenovo', 'product': 'thinkagile_vx5530_firmware', 'versions': [{'status': 'affected', 'version': '0', 'lessThan': '4.71', 'versionType': 'custom'}], 'defaultStatus': 'unknown'}, {'cpes': ['cpe:2.3:o:lenovo:thinkagile_vx7320_n_firmware:-:*:*:*:*:*:*:*'], 'vendor': 'lenovo', 'product': 'thinkagile_vx7320_n_firmware', 'versions': [{'status': 'affected', 'version': '0', 'lessThan': '9.97', 'versionType': 'custom'}], 'defaultStatus': 'unknown'}, {'cpes': ['cpe:2.3:o:lenovo:thinkagile_vx7330_firmware:-:*:*:*:*:*:*:*'], 'vendor': 'lenovo', 'product': 'thinkagile_vx7330_firmware', 'versions': [{'status': 'affected', 'version': '0', 'lessThan': '4.71', 'versionType': 'custom'}], 'defaultStatus': 'unknown'}, {'cpes': ['cpe:2.3:o:lenovo:thinkagile_vx7520_firmware:-:*:*:*:*:*:*:*'], 'vendor': 'lenovo', 'product': 'thinkagile_vx7520_firmware', 'versions': [{'status': 'affected', 'version': '0', 'lessThan': '9.97', 'versionType': 'custom'}], 'defaultStatus': 'unknown'}, {'cpes': ['cpe:2.3:o:lenovo:thinkagile_vx7520_n_firmware:-:*:*:*:*:*:*:*'], 'vendor': 'lenovo', 'product': 'thinkagile_vx7520_n_firmware', 'versions': [{'status': 'affected', 'version': '0', 'lessThan': '9.97', 'versionType': 'custom'}], 'defaultStatus': 'unknown'}, {'cpes': ['cpe:2.3:o:lenovo:thinkagile_vx7530_firmware:-:*:*:*:*:*:*:*'], 'vendor': 'lenovo', 'product': 'thinkagile_vx7530_firmware', 'versions': [{'status': 'affected', 'version': '0', 'lessThan': '4.71', 'versionType': 'custom'}], 'defaultStatus': 'unknown'}, {'cpes': ['cpe:2.3:o:lenovo:thinkagile_vx7531_firmware:-:*:*:*:*:*:*:*'], 'vendor': 'lenovo', 'product': 'thinkagile_vx7531_firmware', 'versions': [{'status': 'affected', 'version': '0', 'lessThan': '4.71', 'versionType': 'custom'}], 'defaultStatus': 'unknown'}, {'cpes': ['cpe:2.3:o:lenovo:thinkagile_vx7820_firmware:-:*:*:*:*:*:*:*'], 'vendor': 'lenovo', 'product': 'thinkagile_vx7820_firmware', 'versions': [{'status': 'affected', 'version': '0', 'lessThan': '3.11', 'versionType': 'custom'}], 'defaultStatus': 'unknown'}, {'cpes': ['cpe:2.3:o:lenovo:thinkstation_p920_workstation_firmware:-:*:*:*:*:*:*:*'], 'vendor': 'lenovo', 'product': 'thinkstation_p920_workstation_firmware', 'versions': [{'status': 'affected', 'version': '0', 'lessThan': '9.97', 'versionType': 'custom'}], 'defaultStatus': 'unknown'}, {'cpes': ['cpe:2.3:o:lenovo:thinksystem_st250_firmware:-:*:*:*:*:*:*:*'], 'vendor': 'lenovo', 'product': 'thinksystem_st250_firmware', 'versions': [{'status': 'affected', 'version': '0', 'lessThan': '1.12', 'versionType': 'custom'}], 'defaultStatus': 'unknown'}, {'cpes': ['cpe:2.3:o:lenovo:thinksystem_sd530_firmware:-:*:*:*:*:*:*:*'], 'vendor': 'lenovo', 'product': 'thinksystem_sd530_firmware', 'versions': [{'status': 'affected', 'version': '0', 'lessThan': '4.11', 'versionType': 'custom'}], 'defaultStatus': 'unknown'}, {'cpes': ['cpe:2.3:o:lenovo:thinksystem_sd630_v2_firmware:-:*:*:*:*:*:*:*'], 'vendor': 'lenovo', 'product': 'thinksystem_sd630_v2_firmware', 'versions': [{'status': 'affected', 'version': '0', 'lessThan': '4.11', 'versionType': 'custom'}], 'defaultStatus': 'unknown'}, {'cpes': ['cpe:2.3:o:lenovo:thinksystem_sd650_dual_node_tray_firmware:-:*:*:*:*:*:*:*'], 'vendor': 'lenovo', 'product': 'thinksystem_sd650_dual_node_tray_firmware', 'versions': [{'status': 'affected', 'version': '0', 'lessThan': '4.11', 'versionType': 'custom'}, {'status': 'affected', 'version': '0', 'lessThan': '6.36', 'versionType': 'custom'}], 'defaultStatus': 'unknown'}, {'cpes': ['cpe:2.3:o:lenovo:thinksystem_sd650-n_v2_firmware:-:*:*:*:*:*:*:*'], 'vendor': 'lenovo', 'product': 'thinksystem_sd650-n_v2_firmware', 'versions': [{'status': 'affected', 'version': '0', 'lessThan': '4.11', 'versionType': 'custom'}], 'defaultStatus': 'unknown'}, {'cpes': ['cpe:2.3:o:lenovo:thinksystem_sd650_v3_firmware:-:*:*:*:*:*:*:*'], 'vendor': 'lenovo', 'product': 'thinksystem_sd650_v3_firmware', 'versions': [{'status': 'affected', 'version': '0', 'lessThan': '4.11', 'versionType': 'custom'}], 'defaultStatus': 'unknown'}, {'cpes': ['cpe:2.3:o:lenovo:thinksystem_sd665_v3_firmware:-:*:*:*:*:*:*:*'], 'vendor': 'lenovo', 'product': 'thinksystem_sd665_v3_firmware', 'versions': [{'status': 'affected', 'version': '0', 'lessThan': '5.11', 'versionType': 'custom'}], 'defaultStatus': 'unknown'}, {'cpes': ['cpe:2.3:o:lenovo:thinksystem_se350_firmware:-:*:*:*:*:*:*:*'], 'vendor': 'lenovo', 'product': 'thinksystem_se350_firmware', 'versions': [{'status': 'affected', 'version': '0', 'lessThan': '4.11', 'versionType': 'custom'}], 'defaultStatus': 'unknown'}, {'cpes': ['cpe:2.3:o:lenovo:thinksystem_sn550_firmware:-:*:*:*:*:*:*:*'], 'vendor': 'lenovo', 'product': 'thinksystem_sn550_firmware', 'versions': [{'status': 'affected', 'version': '0', 'lessThan': '4.11', 'versionType': 'custom'}, {'status': 'affected', 'version': '0', 'lessThan': '6.36', 'versionType': 'custom'}], 'defaultStatus': 'unknown'}, {'cpes': ['cpe:2.3:o:lenovo:thinksystem_sn550_v2_firmware:-:*:*:*:*:*:*:*'], 'vendor': 'lenovo', 'product': 'thinksystem_sn550_v2_firmware', 'versions': [{'status': 'affected', 'version': '0', 'lessThan': '4.11', 'versionType': 'custom'}], 'defaultStatus': 'unknown'}, {'cpes': ['cpe:2.3:o:lenovo:thinksystem_sn850_firmware:-:*:*:*:*:*:*:*'], 'vendor': 'lenovo', 'product': 'thinksystem_sn850_firmware', 'versions': [{'status': 'affected', 'version': '0', 'lessThan': '4.11', 'versionType': 'custom'}, {'status': 'affected', 'version': '0', 'lessThan': '6.36', 'versionType': 'custom'}], 'defaultStatus': 'unknown'}, {'cpes': ['cpe:2.3:o:lenovo:thinksystem_sr150_firmware:-:*:*:*:*:*:*:*'], 'vendor': 'lenovo', 'product': 'thinksystem_sr150_firmware', 'versions': [{'status': 'affected', 'version': '0', 'lessThan': '4.11', 'versionType': 'custom'}], 'defaultStatus': 'unknown'}, {'cpes': ['cpe:2.3:o:lenovo:thinksystem_sr158_firmware:-:*:*:*:*:*:*:*'], 'vendor': 'lenovo', 'product': 'thinksystem_sr158_firmware', 'versions': [{'status': 'affected', 'version': '0', 'lessThan': '4.11', 'versionType': 'custom'}], 'defaultStatus': 'unknown'}, {'cpes': ['cpe:2.3:o:lenovo:thinksystem_sr250_firmware:-:*:*:*:*:*:*:*'], 'vendor': 'lenovo', 'product': 'thinksystem_sr250_firmware', 'versions': [{'status': 'affected', 'version': '0', 'lessThan': '4.11', 'versionType': 'custom'}], 'defaultStatus': 'unknown'}, {'cpes': ['cpe:2.3:o:lenovo:thinksystem_sr250_v2_firmware:-:*:*:*:*:*:*:*'], 'vendor': 'lenovo', 'product': 'thinksystem_sr250_v2_firmware', 'versions': [{'status': 'affected', 'version': '0', 'lessThan': '4.11', 'versionType': 'custom'}], 'defaultStatus': 'unknown'}, {'cpes': ['cpe:2.3:o:lenovo:thinksystem_sr258_firmware:-:*:*:*:*:*:*:*'], 'vendor': 'lenovo', 'product': 'thinksystem_sr258_firmware', 'versions': [{'status': 'affected', 'version': '0', 'lessThan': '4.11', 'versionType': 'custom'}], 'defaultStatus': 'unknown'}, {'cpes': ['cpe:2.3:o:lenovo:thinksystem_sr258_v2_firmware:-:*:*:*:*:*:*:*'], 'vendor': 'lenovo', 'product': 'thinksystem_sr258_v2_firmware', 'versions': [{'status': 'affected', 'version': '0', 'lessThan': '4.11', 'versionType': 'custom'}], 'defaultStatus': 'unknown'}, {'cpes': ['cpe:2.3:o:lenovo:thinksystem_sr530_firmware:-:*:*:*:*:*:*:*'], 'vendor': 'lenovo', 'product': 'thinksystem_sr530_firmware', 'versions': [{'status': 'affected', 'version': '0', 'lessThan': '9.97', 'versionType': 'custom'}], 'defaultStatus': 'unknown'}, {'cpes': ['cpe:2.3:o:lenovo:thinksystem_sr550_firmware:-:*:*:*:*:*:*:*'], 'vendor': 'lenovo', 'product': 'thinksystem_sr550_firmware', 'versions': [{'status': 'affected', 'version': '0', 'lessThan': '9.97', 'versionType': 'custom'}], 'defaultStatus': 'unknown'}, {'cpes': ['cpe:2.3:o:lenovo:thinksystem_sr570_firmware:-:*:*:*:*:*:*:*'], 'vendor': 'lenovo', 'product': 'thinksystem_sr570_firmware', 'versions': [{'status': 'affected', 'version': '0', 'lessThan': '9.97', 'versionType': 'custom'}], 'defaultStatus': 'unknown'}, {'cpes': ['cpe:2.3:o:lenovo:thinksystem_sr590_firmware:-:*:*:*:*:*:*:*'], 'vendor': 'lenovo', 'product': 'thinksystem_sr590_firmware', 'versions': [{'status': 'affected', 'version': '0', 'lessThan': '9.97', 'versionType': 'custom'}], 'defaultStatus': 'unknown'}, {'cpes': ['cpe:2.3:o:lenovo:thinksystem_sr630_firmware:-:*:*:*:*:*:*:*'], 'vendor': 'lenovo', 'product': 'thinksystem_sr630_firmware', 'versions': [{'status': 'affected', 'version': '0', 'lessThan': '9.97', 'versionType': 'custom'}], 'defaultStatus': 'unknown'}, {'cpes': ['cpe:2.3:o:lenovo:thinksystem_sr630_v2_firmware:-:*:*:*:*:*:*:*'], 'vendor': 'lenovo', 'product': 'thinksystem_sr630_v2_firmware', 'versions': [{'status': 'affected', 'version': '0', 'lessThan': '4.71', 'versionType': 'custom'}], 'defaultStatus': 'unknown'}, {'cpes': ['cpe:2.3:o:lenovo:thinksystem_sr630_v3_firmware:-:*:*:*:*:*:*:*'], 'vendor': 'lenovo', 'product': 'thinksystem_sr630_v3_firmware', 'versions': [{'status': 'affected', 'version': '0', 'lessThan': '4.51', 'versionType': 'custom'}], 'defaultStatus': 'unknown'}, {'cpes': ['cpe:2.3:o:lenovo:thinksystem_sr635_firmware:-:*:*:*:*:*:*:*'], 'vendor': 'lenovo', 'product': 'thinksystem_sr635_firmware', 'versions': [{'status': 'affected', 'version': '0', 'lessThan': '2.81', 'versionType': 'custom'}], 'defaultStatus': 'unknown'}, {'cpes': ['cpe:2.3:o:lenovo:thinksystem_sr645_firmware:-:*:*:*:*:*:*:*'], 'vendor': 'lenovo', 'product': 'thinksystem_sr645_firmware', 'versions': [{'status': 'affected', 'version': '0', 'lessThan': '5.61', 'versionType': 'custom'}], 'defaultStatus': 'unknown'}, {'cpes': ['cpe:2.3:o:lenovo:thinksystem_sr645_v3_firmware:-:*:*:*:*:*:*:*'], 'vendor': 'lenovo', 'product': 'thinksystem_sr645_v3_firmware', 'versions': [{'status': 'affected', 'version': '0', 'lessThan': '2.81', 'versionType': 'custom'}], 'defaultStatus': 'unknown'}, {'cpes': ['cpe:2.3:o:lenovo:thinksystem_sr650_firmware:-:*:*:*:*:*:*:*'], 'vendor': 'lenovo', 'product': 'thinksystem_sr650_firmware', 'versions': [{'status': 'affected', 'version': '0', 'lessThan': '9.97', 'versionType': 'custom'}], 'defaultStatus': 'unknown'}, {'cpes': ['cpe:2.3:o:lenovo:thinksystem_sr650_v2_firmware:-:*:*:*:*:*:*:*'], 'vendor': 'lenovo', 'product': 'thinksystem_sr650_v2_firmware', 'versions': [{'status': 'affected', 'version': '0', 'lessThan': '4.71', 'versionType': 'custom'}], 'defaultStatus': 'unknown'}, {'cpes': ['cpe:2.3:o:lenovo:thinksystem_sr655_v3_firmware:-:*:*:*:*:*:*:*'], 'vendor': 'lenovo', 'product': 'thinksystem_sr655_v3_firmware', 'versions': [{'status': 'affected', 'version': '0', 'lessThan': '2.81', 'versionType': 'custom'}], 'defaultStatus': 'unknown'}, {'cpes': ['cpe:2.3:o:lenovo:thinksystem_sr665_firmware:-:*:*:*:*:*:*:*'], 'vendor': 'lenovo', 'product': 'thinksystem_sr665_firmware', 'versions': [{'status': 'affected', 'version': '0', 'lessThan': '5.61', 'versionType': 'custom'}], 'defaultStatus': 'unknown'}, {'cpes': ['cpe:2.3:o:lenovo:thinksystem_sr665_v3_firmware:-:*:*:*:*:*:*:*'], 'vendor': 'lenovo', 'product': 'thinksystem_sr665_v3_firmware', 'versions': [{'status': 'affected', 'version': '0', 'lessThan': '5.61', 'versionType': 'custom'}, {'status': 'affected', 'version': '0', 'lessThan': '2.81', 'versionType': 'custom'}], 'defaultStatus': 'unknown'}, {'cpes': ['cpe:2.3:o:lenovo:thinksystem_sr670_firmware:-:*:*:*:*:*:*:*'], 'vendor': 'lenovo', 'product': 'thinksystem_sr670_firmware', 'versions': [{'status': 'affected', 'version': '0', 'lessThan': '4.11', 'versionType': 'custom'}], 'defaultStatus': 'unknown'}, {'cpes': ['cpe:2.3:o:lenovo:thinksystem_sr670_v2_firmware:-:*:*:*:*:*:*:*'], 'vendor': 'lenovo', 'product': 'thinksystem_sr670_v2_firmware', 'versions': [{'status': 'affected', 'version': '0', 'lessThan': '4.11', 'versionType': 'custom'}], 'defaultStatus': 'unknown'}, {'cpes': ['cpe:2.3:o:lenovo:thinksystem_sr670_v2_firmware:-:*:*:*:*:*:*:*'], 'vendor': 'lenovo', 'product': 'thinksystem_sr670_v2_firmware', 'versions': [{'status': 'affected', 'version': '0', 'lessThan': '5.11', 'versionType': 'custom'}], 'defaultStatus': 'unknown'}, {'cpes': ['cpe:2.3:o:lenovo:thinksystem_sr675_v3_firmware:-:*:*:*:*:*:*:*'], 'vendor': 'lenovo', 'product': 'thinksystem_sr675_v3_firmware', 'versions': [{'status': 'affected', 'version': '0', 'lessThan': '5.11', 'versionType': 'custom'}], 'defaultStatus': 'unknown'}, {'cpes': ['cpe:2.3:o:lenovo:thinksystem_sr850_firmware:-:*:*:*:*:*:*:*'], 'vendor': 'lenovo', 'product': 'thinksystem_sr850_firmware', 'versions': [{'status': 'affected', 'version': '0', 'lessThan': '6.36', 'versionType': 'custom'}, {'status': 'affected', 'version': '0', 'lessThan': '4.11', 'versionType': 'custom'}], 'defaultStatus': 'unknown'}, {'cpes': ['cpe:2.3:o:lenovo:thinksystem_sr850_v2_firmware:-:*:*:*:*:*:*:*'], 'vendor': 'lenovo', 'product': 'thinksystem_sr850_v2_firmware', 'versions': [{'status': 'affected', 'version': '0', 'lessThan': '4.11', 'versionType': 'custom'}], 'defaultStatus': 'unknown'}, {'cpes': ['cpe:2.3:o:lenovo:thinksystem_sr850_v3_firmware:-:*:*:*:*:*:*:*'], 'vendor': 'lenovo', 'product': 'thinksystem_sr850_v3_firmware', 'versions': [{'status': 'affected', 'version': '0', 'lessThan': '1.20', 'versionType': 'custom'}], 'defaultStatus': 'unknown'}, {'cpes': ['cpe:2.3:o:lenovo:thinksystem_sr850p_firmware:-:*:*:*:*:*:*:*'], 'vendor': 'lenovo', 'product': 'thinksystem_sr850p_firmware', 'versions': [{'status': 'affected', 'version': '0', 'lessThan': '6.36', 'versionType': 'custom'}], 'defaultStatus': 'unknown'}, {'cpes': ['cpe:2.3:o:lenovo:thinksystem_sr860_firmware:-:*:*:*:*:*:*:*'], 'vendor': 'lenovo', 'product': 'thinksystem_sr860_firmware', 'versions': [{'status': 'affected', 'version': '0', 'lessThan': '4.11', 'versionType': 'custom'}], 'defaultStatus': 'unknown'}, {'cpes': ['cpe:2.3:o:lenovo:thinksystem_sr860_v2_firmware:-:*:*:*:*:*:*:*'], 'vendor': 'lenovo', 'product': 'thinksystem_sr860_v2_firmware', 'versions': [{'status': 'affected', 'version': '0', 'lessThan': '4.11', 'versionType': 'custom'}], 'defaultStatus': 'unknown'}, {'cpes': ['cpe:2.3:o:lenovo:thinksystem_sr860_v3_firmware:-:*:*:*:*:*:*:*'], 'vendor': 'lenovo', 'product': 'thinksystem_sr860_v3_firmware', 'versions': [{'status': 'affected', 'version': '0', 'lessThan': '1.20', 'versionType': 'custom'}], 'defaultStatus': 'unknown'}, {'cpes': ['cpe:2.3:o:lenovo:thinksystem_sr950_firmware:-:*:*:*:*:*:*:*'], 'vendor': 'lenovo', 'product': 'thinksystem_sr950_firmware', 'versions': [{'status': 'affected', 'version': '0', 'lessThan': '3.11', 'versionType': 'custom'}], 'defaultStatus': 'unknown'}, {'cpes': ['cpe:2.3:o:lenovo:thinksystem_st250_firmware:-:*:*:*:*:*:*:*'], 'vendor': 'lenovo', 'product': 'thinksystem_st250_firmware', 'versions': [{'status': 'affected', 'version': '0', 'lessThan': '4.11', 'versionType': 'custom'}], 'defaultStatus': 'unknown'}, {'cpes': ['cpe:2.3:o:lenovo:thinksystem_st250_v2_firmware:-:*:*:*:*:*:*:*'], 'vendor': 'lenovo', 'product': 'thinksystem_st250_v2_firmware', 'versions': [{'status': 'affected', 'version': '0', 'lessThan': '4.11', 'versionType': 'custom'}], 'defaultStatus': 'unknown'}, {'cpes': ['cpe:2.3:o:lenovo:thinksystem_st258_firmware:-:*:*:*:*:*:*:*'], 'vendor': 'lenovo', 'product': 'thinksystem_st258_firmware', 'versions': [{'status': 'affected', 'version': '0', 'lessThan': '4.11', 'versionType': 'custom'}], 'defaultStatus': 'unknown'}, {'cpes': ['cpe:2.3:o:lenovo:thinksystem_st258_v2_firmware:-:*:*:*:*:*:*:*'], 'vendor': 'lenovo', 'product': 'thinksystem_st258_v2_firmware', 'versions': [{'status': 'affected', 'version': '0', 'lessThan': '4.11', 'versionType': 'custom'}], 'defaultStatus': 'unknown'}, {'cpes': ['cpe:2.3:o:lenovo:thinksystem_st550_firmware:-:*:*:*:*:*:*:*'], 'vendor': 'lenovo', 'product': 'thinksystem_st550_firmware', 'versions': [{'status': 'affected', 'version': '0', 'lessThan': '9.97', 'versionType': 'custom'}], 'defaultStatus': 'unknown'}, {'cpes': ['cpe:2.3:o:lenovo:thinksystem_st650_v2_firmware:-:*:*:*:*:*:*:*'], 'vendor': 'lenovo', 'product': 'thinksystem_st650_v2_firmware', 'versions': [{'status': 'affected', 'version': '0', 'lessThan': '4.11', 'versionType': 'custom'}], 'defaultStatus': 'unknown'}, {'cpes': ['cpe:2.3:o:lenovo:thinksystem_st650_v3_firmware:-:*:*:*:*:*:*:*'], 'vendor': 'lenovo', 'product': 'thinksystem_st650_v3_firmware', 'versions': [{'status': 'affected', 'version': '0', 'lessThan': '4.11', 'versionType': 'custom'}], 'defaultStatus': 'unknown'}, {'cpes': ['cpe:2.3:o:lenovo:thinksystem_st658_v2_firmware:-:*:*:*:*:*:*:*'], 'vendor': 'lenovo', 'product': 'thinksystem_st658_v2_firmware', 'versions': [{'status': 'affected', 'version': '0', 'lessThan': '4.11', 'versionType': 'custom'}], 'defaultStatus': 'unknown'}, {'cpes': ['cpe:2.3:o:lenovo:thinksystem_st658_v3_firmware:-:*:*:*:*:*:*:*'], 'vendor': 'lenovo', 'product': 'thinksystem_st658_v3_firmware', 'versions': [{'status': 'affected', 'version': '0', 'lessThan': '4.11', 'versionType': 'custom'}], 'defaultStatus': 'unknown'}] Added SSVC {'id': 'CVE-2024-38508', 'role': 'CISA Coordinator', 'options': [{'exploitation': 'none'}, {'automatable': 'no'}, {'technicalImpact': 'total'}], 'version': '2.0.3', 'timestamp': '2024-07-27T17:21:26.778193Z'} -
CVE Modified by [email protected]
Jun. 17, 2026
Action Type Old Value New Value Added Affected [{'vendor': 'Lenovo', 'product': 'XClarity Controller', 'versions': [{'status': 'affected', 'version': 'various'}], 'defaultStatus': 'unaffected'}] -
CVE Modified by af854a3a-2127-422b-91ae-364da2661108
Nov. 21, 2024
Action Type Old Value New Value Added Reference https://support.lenovo.com/us/en/product_security/LEN-156781 -
CVE Received by [email protected]
Jul. 26, 2024
Action Type Old Value New Value Added Description A privilege escalation vulnerability was discovered in the web interface or SSH captive command shell interface of XCC that could allow an authenticated XCC user with elevated privileges to perform command injection via a specially crafted request. Added Reference Lenovo Group Ltd. https://support.lenovo.com/us/en/product_security/LEN-156781 [No types assigned] Added CWE Lenovo Group Ltd. CWE-78 Added CVSS V3.1 Lenovo Group Ltd. AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
EPSS is a daily estimate of the probability of exploitation activity
being observed over the next 30 days. Following chart shows the EPSS
score history of the vulnerability.