var-202304-2262
Vulnerability from variot

A valid, authenticated XCC user with read-only permissions can modify custom user roles on other user accounts and the user trespass message through the XCC CLI. There is no exposure if SSH is disabled or if there are no users assigned optional read-only permissions. thinkagile hx5530 firmware, thinkagile hx7530 firmware, ThinkAgile VX3331 firmware etc. Lenovo There are unspecified vulnerabilities in the product.Information may be tampered with

Show details on source website

To clipboard 

{
  "@context": {
    "@vocab": "https://www.variotdbs.pl/ref/VARIoTentry#",
    "affected_products": {
      "@id": "https://www.variotdbs.pl/ref/affected_products"
    },
    "credits": {
      "@id": "https://www.variotdbs.pl/ref/credits"
    },
    "cvss": {
      "@id": "https://www.variotdbs.pl/ref/cvss/"
    },
    "description": {
      "@id": "https://www.variotdbs.pl/ref/description/"
    },
    "exploit_availability": {
      "@id": "https://www.variotdbs.pl/ref/exploit_availability/"
    },
    "external_ids": {
      "@id": "https://www.variotdbs.pl/ref/external_ids/"
    },
    "iot": {
      "@id": "https://www.variotdbs.pl/ref/iot/"
    },
    "iot_taxonomy": {
      "@id": "https://www.variotdbs.pl/ref/iot_taxonomy/"
    },
    "patch": {
      "@id": "https://www.variotdbs.pl/ref/patch/"
    },
    "problemtype_data": {
      "@id": "https://www.variotdbs.pl/ref/problemtype_data/"
    },
    "references": {
      "@id": "https://www.variotdbs.pl/ref/references/"
    },
    "sources": {
      "@id": "https://www.variotdbs.pl/ref/sources/"
    },
    "sources_release_date": {
      "@id": "https://www.variotdbs.pl/ref/sources_release_date/"
    },
    "sources_update_date": {
      "@id": "https://www.variotdbs.pl/ref/sources_update_date/"
    },
    "threat_type": {
      "@id": "https://www.variotdbs.pl/ref/threat_type/"
    },
    "title": {
      "@id": "https://www.variotdbs.pl/ref/title/"
    },
    "type": {
      "@id": "https://www.variotdbs.pl/ref/type/"
    }
  },
  "@id": "https://www.variotdbs.pl/vuln/VAR-202304-2262",
  "affected_products": {
    "@context": {
      "@vocab": "https://www.variotdbs.pl/ref/affected_products#",
      "data": {
        "@container": "@list"
      },
      "sources": {
        "@container": "@list",
        "@context": {
          "@vocab": "https://www.variotdbs.pl/ref/sources#"
        },
        "@id": "https://www.variotdbs.pl/ref/sources"
      }
    },
    "data": [
      {
        "model": "thinksystem sr650 v2",
        "scope": "lt",
        "trust": 1.0,
        "vendor": "lenovo",
        "version": "2.93_afbt30p"
      },
      {
        "model": "thinkagile hx5520",
        "scope": "lt",
        "trust": 1.0,
        "vendor": "lenovo",
        "version": "8.88_cdi3a4a"
      },
      {
        "model": "thinksystem st258 v2",
        "scope": "lt",
        "trust": 1.0,
        "vendor": "lenovo",
        "version": "2.60_tgbt42h"
      },
      {
        "model": "thinksystem sr258",
        "scope": "lt",
        "trust": 1.0,
        "vendor": "lenovo",
        "version": "3.72_tei388s"
      },
      {
        "model": "thinkagile hx1331",
        "scope": "lt",
        "trust": 1.0,
        "vendor": "lenovo",
        "version": "2.93_afbt30p"
      },
      {
        "model": "thinksystem sr650",
        "scope": "lt",
        "trust": 1.0,
        "vendor": "lenovo",
        "version": "8.88_cdi3a4a"
      },
      {
        "model": "thinkagile vx1320",
        "scope": "lt",
        "trust": 1.0,
        "vendor": "lenovo",
        "version": "3.72_tei388s"
      },
      {
        "model": "thinkagile vx2320",
        "scope": "lt",
        "trust": 1.0,
        "vendor": "lenovo",
        "version": "8.88_cdi3a4a"
      },
      {
        "model": "thinksystem sd630 v2",
        "scope": "lt",
        "trust": 1.0,
        "vendor": "lenovo",
        "version": "2.60_tgbt42h"
      },
      {
        "model": "thinkagile hx2320-e",
        "scope": "lt",
        "trust": 1.0,
        "vendor": "lenovo",
        "version": "8.88_cdi3a4a"
      },
      {
        "model": "thinksystem sr158",
        "scope": "lt",
        "trust": 1.0,
        "vendor": "lenovo",
        "version": "3.72_tei388s"
      },
      {
        "model": "thinkagile hx3320",
        "scope": "lt",
        "trust": 1.0,
        "vendor": "lenovo",
        "version": "8.88_cdi3a4a"
      },
      {
        "model": "thinkagile vx 1se",
        "scope": "lt",
        "trust": 1.0,
        "vendor": "lenovo",
        "version": "3.72_tei388s"
      },
      {
        "model": "thinkagile hx2720-e",
        "scope": "lt",
        "trust": 1.0,
        "vendor": "lenovo",
        "version": "3.72_tei388s"
      },
      {
        "model": "thinksystem sr550",
        "scope": "lt",
        "trust": 1.0,
        "vendor": "lenovo",
        "version": "8.88_cdi3a4a"
      },
      {
        "model": "thinkagile hx7531",
        "scope": "lt",
        "trust": 1.0,
        "vendor": "lenovo",
        "version": "2.93_afbt30p"
      },
      {
        "model": "thinkagile mx3530 f",
        "scope": "lt",
        "trust": 1.0,
        "vendor": "lenovo",
        "version": "2.93_afbt30p"
      },
      {
        "model": "thinksystem sd530",
        "scope": "lt",
        "trust": 1.0,
        "vendor": "lenovo",
        "version": "3.72_tei388s"
      },
      {
        "model": "thinksystem st250",
        "scope": "lt",
        "trust": 1.0,
        "vendor": "lenovo",
        "version": "3.72_tei388s"
      },
      {
        "model": "thinkagile hx3331",
        "scope": "lt",
        "trust": 1.0,
        "vendor": "lenovo",
        "version": "2.93_afbt30p"
      },
      {
        "model": "thinkagile hx1320",
        "scope": "lt",
        "trust": 1.0,
        "vendor": "lenovo",
        "version": "8.88_cdi3a4a"
      },
      {
        "model": "thinkagile hx5521-c",
        "scope": "lt",
        "trust": 1.0,
        "vendor": "lenovo",
        "version": "2.93_afbt30p"
      },
      {
        "model": "thinkagile vx3720",
        "scope": "lt",
        "trust": 1.0,
        "vendor": "lenovo",
        "version": "3.72_tei388s"
      },
      {
        "model": "thinkagile mx3531 h",
        "scope": "lt",
        "trust": 1.0,
        "vendor": "lenovo",
        "version": "2.93_afbt30p"
      },
      {
        "model": "thinksystem sr950",
        "scope": "lt",
        "trust": 1.0,
        "vendor": "lenovo",
        "version": "2.75_psi348s"
      },
      {
        "model": "thinkagile hx1321",
        "scope": "lt",
        "trust": 1.0,
        "vendor": "lenovo",
        "version": "8.88_cdi3a4a"
      },
      {
        "model": "thinkagile hx2330",
        "scope": "eq",
        "trust": 1.0,
        "vendor": "lenovo",
        "version": "2.93_afbt30p"
      },
      {
        "model": "thinkagile hx3375",
        "scope": "lt",
        "trust": 1.0,
        "vendor": "lenovo",
        "version": "4.71_d8bt48p"
      },
      {
        "model": "thinksystem sr670",
        "scope": "lt",
        "trust": 1.0,
        "vendor": "lenovo",
        "version": "3.72_tei388s"
      },
      {
        "model": "thinksystem sr250",
        "scope": "lt",
        "trust": 1.0,
        "vendor": "lenovo",
        "version": "3.72_tei388s"
      },
      {
        "model": "thinkagile vx7531",
        "scope": "lt",
        "trust": 1.0,
        "vendor": "lenovo",
        "version": "2.93_afbt30p"
      },
      {
        "model": "thinkagile hx5530",
        "scope": "lt",
        "trust": 1.0,
        "vendor": "lenovo",
        "version": "2.93_afbt30p"
      },
      {
        "model": "thinksystem st250 v2",
        "scope": "lt",
        "trust": 1.0,
        "vendor": "lenovo",
        "version": "2.60_tgbt42h"
      },
      {
        "model": "thinkagile hx7530",
        "scope": "lt",
        "trust": 1.0,
        "vendor": "lenovo",
        "version": "2.93_afbt30p"
      },
      {
        "model": "thinkagile hx7521",
        "scope": "lt",
        "trust": 1.0,
        "vendor": "lenovo",
        "version": "2.93_afbt30p"
      },
      {
        "model": "thinkstation p920",
        "scope": "lt",
        "trust": 1.0,
        "vendor": "lenovo",
        "version": "8.88_cdi3a4a"
      },
      {
        "model": "thinksystem st258",
        "scope": "lt",
        "trust": 1.0,
        "vendor": "lenovo",
        "version": "3.72_tei388s"
      },
      {
        "model": "thinkagile vx3320",
        "scope": "lt",
        "trust": 1.0,
        "vendor": "lenovo",
        "version": "8.88_cdi3a4a"
      },
      {
        "model": "thinkagile hx3331",
        "scope": "lt",
        "trust": 1.0,
        "vendor": "lenovo",
        "version": "4.71_d8bt48p"
      },
      {
        "model": "thinkagile hx3720",
        "scope": "lt",
        "trust": 1.0,
        "vendor": "lenovo",
        "version": "3.72_tei388s"
      },
      {
        "model": "thinksystem sr530",
        "scope": "lt",
        "trust": 1.0,
        "vendor": "lenovo",
        "version": "8.88_cdi3a4a"
      },
      {
        "model": "thinkagile hx1521-r",
        "scope": "lt",
        "trust": 1.0,
        "vendor": "lenovo",
        "version": "8.88_cdi3a4a"
      },
      {
        "model": "thinkagile vx3330",
        "scope": "lt",
        "trust": 1.0,
        "vendor": "lenovo",
        "version": "2.93_afbt30p"
      },
      {
        "model": "thinksystem sn850",
        "scope": "lt",
        "trust": 1.0,
        "vendor": "lenovo",
        "version": "3.72_tei388s"
      },
      {
        "model": "thinkagile hx2331",
        "scope": "lt",
        "trust": 1.0,
        "vendor": "lenovo",
        "version": "2.93_afbt30p"
      },
      {
        "model": "thinkagile hx7520",
        "scope": "lt",
        "trust": 1.0,
        "vendor": "lenovo",
        "version": "8.88_cdi3a4a"
      },
      {
        "model": "thinkagile hx enclosure",
        "scope": "lt",
        "trust": 1.0,
        "vendor": "lenovo",
        "version": "3.72_tei388s"
      },
      {
        "model": "thinksystem se350",
        "scope": "lt",
        "trust": 1.0,
        "vendor": "lenovo",
        "version": "3.72_tei388s"
      },
      {
        "model": "thinkagile hx5531",
        "scope": "lt",
        "trust": 1.0,
        "vendor": "lenovo",
        "version": "8.88_cdi3a4a"
      },
      {
        "model": "thinksystem sr630",
        "scope": "lt",
        "trust": 1.0,
        "vendor": "lenovo",
        "version": "8.88_cdi3a4a"
      },
      {
        "model": "thinksystem sr645",
        "scope": "lt",
        "trust": 1.0,
        "vendor": "lenovo",
        "version": "4.71_d8bt48p"
      },
      {
        "model": "thinkagile hx2321",
        "scope": "lt",
        "trust": 1.0,
        "vendor": "lenovo",
        "version": "8.88_cdi3a4a"
      },
      {
        "model": "thinksystem sr645 v3",
        "scope": "lt",
        "trust": 1.0,
        "vendor": "lenovo",
        "version": "4.71_d8bt48p"
      },
      {
        "model": "thinkagile mx1020",
        "scope": "lt",
        "trust": 1.0,
        "vendor": "lenovo",
        "version": "2.93_afbt30p"
      },
      {
        "model": "thinksystem sr850p",
        "scope": "lt",
        "trust": 1.0,
        "vendor": "lenovo",
        "version": "3.72_tei388s"
      },
      {
        "model": "thinksystem sr250 v2",
        "scope": "lt",
        "trust": 1.0,
        "vendor": "lenovo",
        "version": "2.60_tgbt42h"
      },
      {
        "model": "thinkagile vx3520-g",
        "scope": "lt",
        "trust": 1.0,
        "vendor": "lenovo",
        "version": "8.88_cdi3a4a"
      },
      {
        "model": "thinkagile vx7320 n",
        "scope": "lt",
        "trust": 1.0,
        "vendor": "lenovo",
        "version": "8.88_cdi3a4a"
      },
      {
        "model": "thinkagile hx3521-g",
        "scope": "lt",
        "trust": 1.0,
        "vendor": "lenovo",
        "version": "3.72_tei388s"
      },
      {
        "model": "thinkagile hx3321",
        "scope": "lt",
        "trust": 1.0,
        "vendor": "lenovo",
        "version": "8.88_cdi3a4a"
      },
      {
        "model": "thinkagile hx7820",
        "scope": "lt",
        "trust": 1.0,
        "vendor": "lenovo",
        "version": "2.75_psi348s"
      },
      {
        "model": "thinksystem sr850",
        "scope": "lt",
        "trust": 1.0,
        "vendor": "lenovo",
        "version": "3.72_tei388s"
      },
      {
        "model": "thinkagile hx1021",
        "scope": "lt",
        "trust": 1.0,
        "vendor": "lenovo",
        "version": "3.72_tei388s"
      },
      {
        "model": "thinksystem st550",
        "scope": "lt",
        "trust": 1.0,
        "vendor": "lenovo",
        "version": "8.88_cdi3a4a"
      },
      {
        "model": "thinkagile vx5520",
        "scope": "lt",
        "trust": 1.0,
        "vendor": "lenovo",
        "version": "8.88_cdi3a4a"
      },
      {
        "model": "thinksystem sr570",
        "scope": "lt",
        "trust": 1.0,
        "vendor": "lenovo",
        "version": "8.88_cdi3a4a"
      },
      {
        "model": "thinksystem sd650",
        "scope": "lt",
        "trust": 1.0,
        "vendor": "lenovo",
        "version": "3.72_tei388s"
      },
      {
        "model": "thinkagile hx1520-r",
        "scope": "lt",
        "trust": 1.0,
        "vendor": "lenovo",
        "version": "8.88_cdi3a4a"
      },
      {
        "model": "thinksystem sn550 v2",
        "scope": "lt",
        "trust": 1.0,
        "vendor": "lenovo",
        "version": "2.60_tgbt42h"
      },
      {
        "model": "thinkagile vx3530-g",
        "scope": "lt",
        "trust": 1.0,
        "vendor": "lenovo",
        "version": "2.93_afbt30p"
      },
      {
        "model": "thinksystem sn550",
        "scope": "lt",
        "trust": 1.0,
        "vendor": "lenovo",
        "version": "3.72_tei388s"
      },
      {
        "model": "thinkagile vx7820",
        "scope": "lt",
        "trust": 1.0,
        "vendor": "lenovo",
        "version": "2.75_psi348s"
      },
      {
        "model": "thinkagile hx3520-g",
        "scope": "lt",
        "trust": 1.0,
        "vendor": "lenovo",
        "version": "8.88_cdi3a4a"
      },
      {
        "model": "thinkagile mx3331-h",
        "scope": "lt",
        "trust": 1.0,
        "vendor": "lenovo",
        "version": "2.93_afbt30p"
      },
      {
        "model": "thinksystem sr860",
        "scope": "lt",
        "trust": 1.0,
        "vendor": "lenovo",
        "version": "3.72_tei388s"
      },
      {
        "model": "thinksystem st650 v2",
        "scope": "lt",
        "trust": 1.0,
        "vendor": "lenovo",
        "version": "2.60_tgbt42h"
      },
      {
        "model": "thinksystem sr670 v2",
        "scope": "lt",
        "trust": 1.0,
        "vendor": "lenovo",
        "version": "2.60_tgbt42h"
      },
      {
        "model": "thinkagile vx7520 n",
        "scope": "lt",
        "trust": 1.0,
        "vendor": "lenovo",
        "version": "8.88_cdi3a4a"
      },
      {
        "model": "thinkagile hx5521",
        "scope": "lt",
        "trust": 1.0,
        "vendor": "lenovo",
        "version": "8.88_cdi3a4a"
      },
      {
        "model": "thinksystem sr150",
        "scope": "lt",
        "trust": 1.0,
        "vendor": "lenovo",
        "version": "3.72_tei388s"
      },
      {
        "model": "thinkagile hx7821",
        "scope": "lt",
        "trust": 1.0,
        "vendor": "lenovo",
        "version": "3.72_tei388s"
      },
      {
        "model": "thinkagile mx3531-f",
        "scope": "lt",
        "trust": 1.0,
        "vendor": "lenovo",
        "version": "3.72_tei388s"
      },
      {
        "model": "thinkagile vx 2u4n",
        "scope": "lt",
        "trust": 1.0,
        "vendor": "lenovo",
        "version": "3.72_tei388s"
      },
      {
        "model": "thinksystem sr665",
        "scope": "lt",
        "trust": 1.0,
        "vendor": "lenovo",
        "version": "4.71_d8bt48p"
      },
      {
        "model": "thinkagile hx7531",
        "scope": "lt",
        "trust": 1.0,
        "vendor": "lenovo",
        "version": "2.75_psi348s"
      },
      {
        "model": "thinkagile hx3721",
        "scope": "lt",
        "trust": 1.0,
        "vendor": "lenovo",
        "version": "8.88_cdi3a4a"
      },
      {
        "model": "thinkagile vx5530",
        "scope": "lt",
        "trust": 1.0,
        "vendor": "lenovo",
        "version": "2.93_afbt30p"
      },
      {
        "model": "thinkagile vx7330",
        "scope": "lt",
        "trust": 1.0,
        "vendor": "lenovo",
        "version": "2.93_afbt30p"
      },
      {
        "model": "thinkagile vx7530",
        "scope": "lt",
        "trust": 1.0,
        "vendor": "lenovo",
        "version": "2.93_afbt30p"
      },
      {
        "model": "thinksystem sr258 v2",
        "scope": "lt",
        "trust": 1.0,
        "vendor": "lenovo",
        "version": "2.60_tgbt42h"
      },
      {
        "model": "thinkagile vx3331",
        "scope": "lt",
        "trust": 1.0,
        "vendor": "lenovo",
        "version": "2.93_afbt30p"
      },
      {
        "model": "thinkagile hx5520-c",
        "scope": "lt",
        "trust": 1.0,
        "vendor": "lenovo",
        "version": "8.88_cdi3a4a"
      },
      {
        "model": "thinksystem sr630 v2",
        "scope": "lt",
        "trust": 1.0,
        "vendor": "lenovo",
        "version": "2.93_afbt30p"
      },
      {
        "model": "thinkagile vx 4u",
        "scope": "lt",
        "trust": 1.0,
        "vendor": "lenovo",
        "version": "2.75_psi348s"
      },
      {
        "model": "thinkagile mx3330-f",
        "scope": "lt",
        "trust": 1.0,
        "vendor": "lenovo",
        "version": "2.93_afbt30p"
      },
      {
        "model": "thinksystem sd650 v2",
        "scope": "lt",
        "trust": 1.0,
        "vendor": "lenovo",
        "version": "2.60_tgbt42h"
      },
      {
        "model": "thinkagile vx2330",
        "scope": "lt",
        "trust": 1.0,
        "vendor": "lenovo",
        "version": "2.93_afbt30p"
      },
      {
        "model": "thinkagile hx3376",
        "scope": "lt",
        "trust": 1.0,
        "vendor": "lenovo",
        "version": "8.88_cdi3a4a"
      },
      {
        "model": "thinkagile vx7520",
        "scope": "lt",
        "trust": 1.0,
        "vendor": "lenovo",
        "version": "8.88_cdi3a4a"
      },
      {
        "model": "thinkagile hx2330",
        "scope": "lt",
        "trust": 1.0,
        "vendor": "lenovo",
        "version": "2.93_afbt30p"
      },
      {
        "model": "thinkagile mx3330-h",
        "scope": "lt",
        "trust": 1.0,
        "vendor": "lenovo",
        "version": "2.93_afbt30p"
      },
      {
        "model": "thinksystem sr590",
        "scope": "lt",
        "trust": 1.0,
        "vendor": "lenovo",
        "version": "8.88_cdi3a4a"
      },
      {
        "model": "thinkagile mx3331-f",
        "scope": "lt",
        "trust": 1.0,
        "vendor": "lenovo",
        "version": "2.93_afbt30p"
      },
      {
        "model": "thinksystem sd650-n v2",
        "scope": "lt",
        "trust": 1.0,
        "vendor": "lenovo",
        "version": "2.60_tgbt42h"
      },
      {
        "model": "thinksystem st658 v2",
        "scope": "lt",
        "trust": 1.0,
        "vendor": "lenovo",
        "version": "2.60_tgbt42h"
      },
      {
        "model": "thinksystem sr860 v2",
        "scope": "lt",
        "trust": 1.0,
        "vendor": "lenovo",
        "version": "2.60_tgbt42h"
      },
      {
        "model": "thinkedge se450",
        "scope": "lt",
        "trust": 1.0,
        "vendor": "lenovo",
        "version": "1.60_usx324o"
      },
      {
        "model": "thinkagile hx3330",
        "scope": "lt",
        "trust": 1.0,
        "vendor": "lenovo",
        "version": "2.93_afbt30p"
      },
      {
        "model": "thinkagile mx3530-h",
        "scope": "lt",
        "trust": 1.0,
        "vendor": "lenovo",
        "version": "2.93_afbt30p"
      },
      {
        "model": "thinkagile mx1021 on se350",
        "scope": "lt",
        "trust": 1.0,
        "vendor": "lenovo",
        "version": "3.72_tei388s"
      },
      {
        "model": "thinksystem sr850 v2",
        "scope": "lt",
        "trust": 1.0,
        "vendor": "lenovo",
        "version": "2.60_tgbt42h"
      },
      {
        "model": "thinksystem sr665 v3",
        "scope": "lt",
        "trust": 1.0,
        "vendor": "lenovo",
        "version": "4.71_d8bt48p"
      },
      {
        "model": "thinkagile hx7530",
        "scope": null,
        "trust": 0.8,
        "vendor": "lenovo",
        "version": null
      },
      {
        "model": "thinkagile hx1321",
        "scope": null,
        "trust": 0.8,
        "vendor": "lenovo",
        "version": null
      },
      {
        "model": "thinkagile hx2320-e",
        "scope": null,
        "trust": 0.8,
        "vendor": "lenovo",
        "version": null
      },
      {
        "model": "thinkagile hx2321",
        "scope": null,
        "trust": 0.8,
        "vendor": "lenovo",
        "version": null
      },
      {
        "model": "thinkagile hx2330",
        "scope": null,
        "trust": 0.8,
        "vendor": "lenovo",
        "version": null
      },
      {
        "model": "thinkagile hx enclosure",
        "scope": null,
        "trust": 0.8,
        "vendor": "lenovo",
        "version": null
      },
      {
        "model": "thinkagile hx1521-r",
        "scope": null,
        "trust": 0.8,
        "vendor": "lenovo",
        "version": null
      },
      {
        "model": "thinkagile hx2720-e",
        "scope": null,
        "trust": 0.8,
        "vendor": "lenovo",
        "version": null
      },
      {
        "model": "thinkagile hx3321",
        "scope": null,
        "trust": 0.8,
        "vendor": "lenovo",
        "version": null
      },
      {
        "model": "thinkagile hx3330",
        "scope": null,
        "trust": 0.8,
        "vendor": "lenovo",
        "version": null
      },
      {
        "model": "thinkagile vx3331",
        "scope": null,
        "trust": 0.8,
        "vendor": "lenovo",
        "version": null
      },
      {
        "model": "thinkagile hx1331",
        "scope": null,
        "trust": 0.8,
        "vendor": "lenovo",
        "version": null
      },
      {
        "model": "thinkagile hx3320",
        "scope": null,
        "trust": 0.8,
        "vendor": "lenovo",
        "version": null
      },
      {
        "model": "thinkagile hx1021",
        "scope": null,
        "trust": 0.8,
        "vendor": "lenovo",
        "version": null
      },
      {
        "model": "thinkagile hx3331",
        "scope": null,
        "trust": 0.8,
        "vendor": "lenovo",
        "version": null
      },
      {
        "model": "thinkagile hx1520-r",
        "scope": null,
        "trust": 0.8,
        "vendor": "lenovo",
        "version": null
      },
      {
        "model": "thinkagile hx1320",
        "scope": null,
        "trust": 0.8,
        "vendor": "lenovo",
        "version": null
      },
      {
        "model": "thinkagile hx2331",
        "scope": null,
        "trust": 0.8,
        "vendor": "lenovo",
        "version": null
      },
      {
        "model": "thinkagile hx5530",
        "scope": null,
        "trust": 0.8,
        "vendor": "lenovo",
        "version": null
      }
    ],
    "sources": [
      {
        "db": "JVNDB",
        "id": "JVNDB-2023-009601"
      },
      {
        "db": "NVD",
        "id": "CVE-2023-29058"
      }
    ]
  },
  "cve": "CVE-2023-29058",
  "cvss": {
    "@context": {
      "cvssV2": {
        "@container": "@list",
        "@context": {
          "@vocab": "https://www.variotdbs.pl/ref/cvss/cvssV2#"
        },
        "@id": "https://www.variotdbs.pl/ref/cvss/cvssV2"
      },
      "cvssV3": {
        "@container": "@list",
        "@context": {
          "@vocab": "https://www.variotdbs.pl/ref/cvss/cvssV3#"
        },
        "@id": "https://www.variotdbs.pl/ref/cvss/cvssV3/"
      },
      "severity": {
        "@container": "@list",
        "@context": {
          "@vocab": "https://www.variotdbs.pl/cvss/severity#"
        },
        "@id": "https://www.variotdbs.pl/ref/cvss/severity"
      },
      "sources": {
        "@container": "@list",
        "@context": {
          "@vocab": "https://www.variotdbs.pl/ref/sources#"
        },
        "@id": "https://www.variotdbs.pl/ref/sources"
      }
    },
    "data": [
      {
        "cvssV2": [],
        "cvssV3": [
          {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "author": "nvd@nist.gov",
            "availabilityImpact": "NONE",
            "baseScore": 6.5,
            "baseSeverity": "MEDIUM",
            "confidentialityImpact": "NONE",
            "exploitabilityScore": 2.8,
            "id": "CVE-2023-29058",
            "impactScore": 3.6,
            "integrityImpact": "HIGH",
            "privilegesRequired": "LOW",
            "scope": "UNCHANGED",
            "trust": 1.0,
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N",
            "version": "3.1"
          },
          {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "author": "psirt@lenovo.com",
            "availabilityImpact": "HIGH",
            "baseScore": 6.4,
            "baseSeverity": "MEDIUM",
            "confidentialityImpact": "LOW",
            "exploitabilityScore": 0.9,
            "id": "CVE-2023-29058",
            "impactScore": 5.5,
            "integrityImpact": "HIGH",
            "privilegesRequired": "HIGH",
            "scope": "UNCHANGED",
            "trust": 1.0,
            "userInteraction": "REQUIRED",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:U/C:L/I:H/A:H",
            "version": "3.1"
          },
          {
            "attackComplexity": "Low",
            "attackVector": "Network",
            "author": "NVD",
            "availabilityImpact": "None",
            "baseScore": 6.5,
            "baseSeverity": "Medium",
            "confidentialityImpact": "None",
            "exploitabilityScore": null,
            "id": "CVE-2023-29058",
            "impactScore": null,
            "integrityImpact": "High",
            "privilegesRequired": "Low",
            "scope": "Unchanged",
            "trust": 0.8,
            "userInteraction": "None",
            "vectorString": "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N",
            "version": "3.0"
          }
        ],
        "severity": [
          {
            "author": "nvd@nist.gov",
            "id": "CVE-2023-29058",
            "trust": 1.0,
            "value": "MEDIUM"
          },
          {
            "author": "psirt@lenovo.com",
            "id": "CVE-2023-29058",
            "trust": 1.0,
            "value": "MEDIUM"
          },
          {
            "author": "NVD",
            "id": "CVE-2023-29058",
            "trust": 0.8,
            "value": "Medium"
          },
          {
            "author": "CNNVD",
            "id": "CNNVD-202304-2274",
            "trust": 0.6,
            "value": "MEDIUM"
          }
        ]
      }
    ],
    "sources": [
      {
        "db": "JVNDB",
        "id": "JVNDB-2023-009601"
      },
      {
        "db": "CNNVD",
        "id": "CNNVD-202304-2274"
      },
      {
        "db": "NVD",
        "id": "CVE-2023-29058"
      },
      {
        "db": "NVD",
        "id": "CVE-2023-29058"
      }
    ]
  },
  "description": {
    "@context": {
      "@vocab": "https://www.variotdbs.pl/ref/description#",
      "sources": {
        "@container": "@list",
        "@context": {
          "@vocab": "https://www.variotdbs.pl/ref/sources#"
        }
      }
    },
    "data": "A valid, authenticated XCC user with read-only permissions can modify custom user roles on other user accounts and the user trespass message through the XCC CLI. There is no exposure if SSH is disabled or if there are no users assigned optional read-only permissions. thinkagile hx5530 firmware, thinkagile hx7530 firmware, ThinkAgile VX3331 firmware etc. Lenovo There are unspecified vulnerabilities in the product.Information may be tampered with",
    "sources": [
      {
        "db": "NVD",
        "id": "CVE-2023-29058"
      },
      {
        "db": "JVNDB",
        "id": "JVNDB-2023-009601"
      },
      {
        "db": "VULMON",
        "id": "CVE-2023-29058"
      }
    ],
    "trust": 1.71
  },
  "external_ids": {
    "@context": {
      "@vocab": "https://www.variotdbs.pl/ref/external_ids#",
      "data": {
        "@container": "@list"
      },
      "sources": {
        "@container": "@list",
        "@context": {
          "@vocab": "https://www.variotdbs.pl/ref/sources#"
        }
      }
    },
    "data": [
      {
        "db": "NVD",
        "id": "CVE-2023-29058",
        "trust": 3.3
      },
      {
        "db": "LENOVO",
        "id": "LEN-118321",
        "trust": 2.5
      },
      {
        "db": "JVNDB",
        "id": "JVNDB-2023-009601",
        "trust": 0.8
      },
      {
        "db": "CNNVD",
        "id": "CNNVD-202304-2274",
        "trust": 0.6
      },
      {
        "db": "VULMON",
        "id": "CVE-2023-29058",
        "trust": 0.1
      }
    ],
    "sources": [
      {
        "db": "VULMON",
        "id": "CVE-2023-29058"
      },
      {
        "db": "JVNDB",
        "id": "JVNDB-2023-009601"
      },
      {
        "db": "CNNVD",
        "id": "CNNVD-202304-2274"
      },
      {
        "db": "NVD",
        "id": "CVE-2023-29058"
      }
    ]
  },
  "id": "VAR-202304-2262",
  "iot": {
    "@context": {
      "@vocab": "https://www.variotdbs.pl/ref/iot#",
      "sources": {
        "@container": "@list",
        "@context": {
          "@vocab": "https://www.variotdbs.pl/ref/sources#"
        }
      }
    },
    "data": true,
    "sources": [
      {
        "db": "VARIoT devices database",
        "id": null
      }
    ],
    "trust": 0.625
  },
  "last_update_date": "2024-08-14T13:52:32.640000Z",
  "patch": {
    "@context": {
      "@vocab": "https://www.variotdbs.pl/ref/patch#",
      "data": {
        "@container": "@list"
      },
      "sources": {
        "@container": "@list",
        "@context": {
          "@vocab": "https://www.variotdbs.pl/ref/sources#"
        }
      }
    },
    "data": [
      {
        "title": "Lenovo XClarity Controller Security vulnerabilities",
        "trust": 0.6,
        "url": "http://123.124.177.30/web/xxk/bdxqById.tag?id=236402"
      }
    ],
    "sources": [
      {
        "db": "CNNVD",
        "id": "CNNVD-202304-2274"
      }
    ]
  },
  "problemtype_data": {
    "@context": {
      "@vocab": "https://www.variotdbs.pl/ref/problemtype_data#",
      "sources": {
        "@container": "@list",
        "@context": {
          "@vocab": "https://www.variotdbs.pl/ref/sources#"
        }
      }
    },
    "data": [
      {
        "problemtype": "CWE-276",
        "trust": 1.0
      },
      {
        "problemtype": "NVD-CWE-noinfo",
        "trust": 1.0
      },
      {
        "problemtype": "Lack of information (CWE-noinfo) [NVD evaluation ]",
        "trust": 0.8
      }
    ],
    "sources": [
      {
        "db": "JVNDB",
        "id": "JVNDB-2023-009601"
      },
      {
        "db": "NVD",
        "id": "CVE-2023-29058"
      }
    ]
  },
  "references": {
    "@context": {
      "@vocab": "https://www.variotdbs.pl/ref/references#",
      "data": {
        "@container": "@list"
      },
      "sources": {
        "@container": "@list",
        "@context": {
          "@vocab": "https://www.variotdbs.pl/ref/sources#"
        }
      }
    },
    "data": [
      {
        "trust": 2.5,
        "url": "https://support.lenovo.com/us/en/product_security/len-118321"
      },
      {
        "trust": 0.8,
        "url": "https://nvd.nist.gov/vuln/detail/cve-2023-29058"
      },
      {
        "trust": 0.6,
        "url": "https://cxsecurity.com/cveshow/cve-2023-29058/"
      },
      {
        "trust": 0.1,
        "url": "https://nvd.nist.gov"
      }
    ],
    "sources": [
      {
        "db": "VULMON",
        "id": "CVE-2023-29058"
      },
      {
        "db": "JVNDB",
        "id": "JVNDB-2023-009601"
      },
      {
        "db": "CNNVD",
        "id": "CNNVD-202304-2274"
      },
      {
        "db": "NVD",
        "id": "CVE-2023-29058"
      }
    ]
  },
  "sources": {
    "@context": {
      "@vocab": "https://www.variotdbs.pl/ref/sources#",
      "data": {
        "@container": "@list"
      }
    },
    "data": [
      {
        "db": "VULMON",
        "id": "CVE-2023-29058"
      },
      {
        "db": "JVNDB",
        "id": "JVNDB-2023-009601"
      },
      {
        "db": "CNNVD",
        "id": "CNNVD-202304-2274"
      },
      {
        "db": "NVD",
        "id": "CVE-2023-29058"
      }
    ]
  },
  "sources_release_date": {
    "@context": {
      "@vocab": "https://www.variotdbs.pl/ref/sources_release_date#",
      "data": {
        "@container": "@list"
      }
    },
    "data": [
      {
        "date": "2023-04-28T00:00:00",
        "db": "VULMON",
        "id": "CVE-2023-29058"
      },
      {
        "date": "2023-12-06T00:00:00",
        "db": "JVNDB",
        "id": "JVNDB-2023-009601"
      },
      {
        "date": "2023-04-28T00:00:00",
        "db": "CNNVD",
        "id": "CNNVD-202304-2274"
      },
      {
        "date": "2023-04-28T21:15:08.750000",
        "db": "NVD",
        "id": "CVE-2023-29058"
      }
    ]
  },
  "sources_update_date": {
    "@context": {
      "@vocab": "https://www.variotdbs.pl/ref/sources_update_date#",
      "data": {
        "@container": "@list"
      }
    },
    "data": [
      {
        "date": "2023-04-28T00:00:00",
        "db": "VULMON",
        "id": "CVE-2023-29058"
      },
      {
        "date": "2023-12-06T02:46:00",
        "db": "JVNDB",
        "id": "JVNDB-2023-009601"
      },
      {
        "date": "2023-05-09T00:00:00",
        "db": "CNNVD",
        "id": "CNNVD-202304-2274"
      },
      {
        "date": "2023-05-08T17:27:52.427000",
        "db": "NVD",
        "id": "CVE-2023-29058"
      }
    ]
  },
  "threat_type": {
    "@context": {
      "@vocab": "https://www.variotdbs.pl/ref/threat_type#",
      "sources": {
        "@container": "@list",
        "@context": {
          "@vocab": "https://www.variotdbs.pl/ref/sources#"
        }
      }
    },
    "data": "remote",
    "sources": [
      {
        "db": "CNNVD",
        "id": "CNNVD-202304-2274"
      }
    ],
    "trust": 0.6
  },
  "title": {
    "@context": {
      "@vocab": "https://www.variotdbs.pl/ref/title#",
      "sources": {
        "@container": "@list",
        "@context": {
          "@vocab": "https://www.variotdbs.pl/ref/sources#"
        }
      }
    },
    "data": "plural \u00a0Lenovo\u00a0 Product vulnerabilities",
    "sources": [
      {
        "db": "JVNDB",
        "id": "JVNDB-2023-009601"
      }
    ],
    "trust": 0.8
  },
  "type": {
    "@context": {
      "@vocab": "https://www.variotdbs.pl/ref/type#",
      "sources": {
        "@container": "@list",
        "@context": {
          "@vocab": "https://www.variotdbs.pl/ref/sources#"
        }
      }
    },
    "data": "other",
    "sources": [
      {
        "db": "CNNVD",
        "id": "CNNVD-202304-2274"
      }
    ],
    "trust": 0.6
  }
}


Log in or create an account to share your comment.




Tags
Taxonomy of the tags.




Sightings

Author Source Type Date

Nomenclature

  • Seen: The vulnerability was mentioned, discussed, or seen somewhere by the user.
  • Confirmed: The vulnerability is confirmed from an analyst perspective.
  • Exploited: This vulnerability was exploited and seen by the user reporting the sighting.
  • Patched: This vulnerability was successfully patched by the user reporting the sighting.
  • Not exploited: This vulnerability was not exploited or seen by the user reporting the sighting.
  • Not confirmed: The user expresses doubt about the veracity of the vulnerability.
  • Not patched: This vulnerability was not successfully patched by the user reporting the sighting.