Thinkagile Hx Enclosure Firmware vulnerabilities
4 known vulnerabilities in Thinkagile Hx Enclosure Firmware from Lenovo. 4 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.
Latest first
- 7.2 High severity
SMM, SMM2, FPC: Improper Neutralization of Special Elements used in an OS Command
A command injection vulnerability was identified in SMM/SMM2 and FPC that could allow an authenticated user with elevated privileges to execute system commands when performing a specific administrative function.
- 7.5 High severity
System Management Module (SMM): Asymmetric Resource Consumption (Amplification)
An unauthenticated denial of service vulnerability exists in the SMM v1, SMM v2, and FPC management web server which can be triggered under crafted conditions. Rebooting SMM or FPC will restore access to the management web server.
- 8.8 High severity
XClarity Controller: Use of Externally-Controlled Format String
A valid, authenticated user may be able to trigger a denial of service of the XCC web user interface or other undefined behavior through a format string injection vulnerability in a web interface API.
- 8.8 High severity
XClarity Controller: Incorrect Default Permissions
A valid XCC user's local account permissions overrides their active directory permissions under specific configurations. This could lead to a privilege escalation. To be vulnerable, LDAP must be configured for authentication/authorization and logins configured