Affected: Lenovo XClarity Controller, lenovo thinkagile_hx5530_firmware, lenovo thinkagile_hx7530_firmware, lenovo thinkagile_vx3331_firmware, lenovo thinkagile_hx_enclosure_certified_node_firmware, lenovo thinkagile_hx1021_edg_firmware, lenovo thinkagile_hx1320_firmware, lenovo thinkagile_hx1331_firmware, lenovo thinkagile_hx1321_firmware, lenovo thinkagile_hx1520-r_firmware and 101 more

A privilege escalation vulnerability was discovered in the web interface or SSH captive command shell interface of XCC that could allow an authenticated XCC user with elevated privileges to perform command injection via a specially crafted request.