HX3376 Certified Node (ThinkAgile) XCC vulnerabilities
4 known vulnerabilities in HX3376 Certified Node (ThinkAgile) XCC from Lenovo. 4 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.
Latest first
- 7.2 High severity
HX5530 Appliance (ThinkAgile) XCC: Improper Neutralization of Special Elements used in an OS Command
An input validation weakness was discovered in XCC that could allow a valid, authenticated XCC user with elevated privileges to perform command injection through specially crafted command line input in the XCC SSH captive shell.
- 7.2 High severity
HX5530 Appliance (ThinkAgile) XCC: Improper Neutralization of Special Elements used in an OS Command
An input validation weakness was discovered in XCC that could allow a valid, authenticated XCC user with elevated privileges to perform command injection or cause a recoverable denial of service using a specially crafted file.
- 7.2 High severity
HX5530 Appliance (ThinkAgile) XCC: Improper Neutralization of Special Elements used in an OS Command
A privilege escalation vulnerability was discovered in XCC that could allow a valid, authenticated XCC user with elevated privileges to perform command injection via specially crafted file uploads.
- 7.2 High severity
HX5530 Appliance (ThinkAgile) XCC: Improper Neutralization of Special Elements used in an OS Command
A privilege escalation vulnerability was discovered in XCC that could allow a valid, authenticated XCC user with elevated privileges to perform command injection via specially crafted IPMI commands.