{"vulnerability": "CVE-2024-38508", "sightings": [{"uuid": "c18fac1e-6a8a-4c4a-9660-6e9821875df3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-38508", "type": "seen", "source": "https://t.me/cvedetector/1721", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-38508 - XCC Command Injection Privilege Escalation\", \n  \"Content\": \"CVE ID : CVE-2024-38508 \nPublished : July 26, 2024, 8:15 p.m. | 44\u00a0minutes ago \nDescription : A privilege escalation vulnerability was discovered in the web interface or SSH captive command shell interface of XCC that could allow an authenticated XCC user with elevated privileges to perform command injection via a specially crafted request. \nSeverity: 7.2 | HIGH \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"26 Jul 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-07-26T23:03:30.000000Z"}, {"uuid": "a23af2d5-2fa0-4d0a-bbfb-46215a6983f3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-38508", "type": "seen", "source": "https://bsky.app/profile/runzero.com/post/3mw6yb5soud26", "content": "What happens when AI-assisted research uncovers an N-day vulnerability?\n\nTod Beardsley breaks down the rediscovery of CVE-2024-38508 (root privilege escalation in Lenovo XCC2) from runZero\u2019s LightsOut project presented at Black Hat and DEF CON.\n\n\ud83d\udc49 Read the post at: www.runzero.com/blog/cve-202...", "creation_timestamp": "2026-09-23T14:47:01.201433Z"}, {"uuid": "267deba3-13c6-474e-9eed-f60a7ca07a8b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-38508", "type": "seen", "source": "https://bsky.app/profile/packetstorm.bsky.social/post/3mwbsyhf4s22d", "content": "CVE-2024-38508, an N-Day Story - RunZero Research https://packetstorm.news/news/view/43943 #news", "creation_timestamp": "2026-09-24T17:50:39.383293Z"}]}