CVE-2023-29057

Published: Apr 28, 2023Modified: Jun 17, 2026

8.8

Vector

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Exploitability: 2.8 / Impact: 5.9

Source: NVD

Description

A valid XCC user's local account permissions overrides their active directory permissions under specific configurations. This could lead to a privilege escalation. To be vulnerable, LDAP must be configured for authentication/authorization and logins configured as “Local First, then LDAP”.

Affected (112)

Lenovo

109 products

Thinkagile Hx5530 Firmware

Thinkagile Vx3331 Firmware

Thinkagile Hx Enclosure Firmware

Thinkagile Hx1021 Firmware

Thinkagile Hx1320 Firmware

Thinkagile Hx1321 Firmware

Thinkagile Hx1331 Firmware

Thinkagile Hx1520 R Firmware

Thinkagile Hx1521 R Firmware

Thinkagile Hx2320 E Firmware

Thinkagile Hx2321 Firmware

Thinkagile Hx2330 Firmware

Thinkagile Hx2331 Firmware

Thinkagile Hx2720 E Firmware

Thinkagile Hx3320 Firmware

Thinkagile Hx3321 Firmware

Thinkagile Hx3330 Firmware

Thinkagile Hx3331 Firmware

Thinkagile Hx3375 Firmware

Thinkagile Hx3376 Firmware

Thinkagile Hx3520 G Firmware

Thinkagile Hx3521 G Firmware

Thinkagile Hx3720 Firmware

Thinkagile Hx3721 Firmware

Thinkagile Hx5520 Firmware

Thinkagile Hx5520 C Firmware

Thinkagile Hx5521 Firmware

Thinkagile Hx5521 C Firmware

Thinkagile Hx5531 Firmware

Thinkagile Hx7520 Firmware

Thinkagile Hx7521 Firmware

Thinkagile Hx7530 Firmware

Thinkagile Hx7531 Firmware

Thinkagile Hx7820 Firmware

Thinkagile Hx7821 Firmware

Thinkagile Mx1020 Firmware

Thinkagile Mx3330 F Firmware

Thinkagile Mx3330 H Firmware

Thinkagile Mx3331 F Firmware

Thinkagile Mx3331 H Firmware

Thinkagile Mx3530 F Firmware

Thinkagile Mx3530 H Firmware

Thinkagile Mx3531 H Firmware

Thinkagile Mx3531 F Firmware

Thinkagile Mx1021 On Se350 Firmware

Thinkagile Vx 1se Firmware

Thinkagile Vx 2u4n Firmware

Thinkagile Vx 4u Firmware

Thinkagile Vx1320 Firmware

Thinkagile Vx2320 Firmware

Thinkagile Vx2330 Firmware

Thinkagile Vx3320 Firmware

Thinkagile Vx3330 Firmware

Thinkagile Vx3520 G Firmware

Thinkagile Vx3530 G Firmware

Thinkagile Vx3720 Firmware

Thinkagile Vx5520 Firmware

Thinkagile Vx5530 Firmware

Thinkagile Vx7320 N Firmware

Thinkagile Vx7330 Firmware

Thinkagile Vx7520 Firmware

Thinkagile Vx7520 N Firmware

Thinkagile Vx7530 Firmware

Thinkagile Vx7531 Firmware

Thinkagile Vx7820 Firmware

Thinkedge Se450 Firmware

Thinkstation P920 Firmware

Thinksystem Sd530 Firmware

Thinksystem Sd630 V2 Firmware

Thinksystem Sd650 Firmware

Thinksystem Sd650 V2 Firmware

Thinksystem Sd650 N V2 Firmware

Thinksystem Se350 Firmware

Thinksystem Sn550 Firmware

Thinksystem Sn550 V2 Firmware

Thinksystem Sn850 Firmware

Thinksystem Sr150 Firmware

Thinksystem Sr158 Firmware

Thinksystem Sr250 Firmware

Thinksystem Sr250 V2 Firmware

Thinksystem Sr258 Firmware

Thinksystem Sr258 V2 Firmware

Thinksystem Sr530 Firmware

Thinksystem Sr550 Firmware

Thinksystem Sr570 Firmware

Thinksystem Sr590 Firmware

Thinksystem Sr630 Firmware

Thinksystem Sr630 V2 Firmware

Thinksystem Sr645 Firmware

Thinksystem Sr645 V3 Firmware

Thinksystem Sr650 Firmware

Thinksystem Sr650 V2 Firmware

Thinksystem Sr665 Firmware

Thinksystem Sr665 V3 Firmware

Thinksystem Sr670 Firmware

Thinksystem Sr670 V2 Firmware

Thinksystem Sr850 Firmware

Thinksystem Sr850 V2 Firmware

Thinksystem Sr850p Firmware

Thinksystem Sr860 Firmware

Thinksystem Sr860 V2 Firmware

Thinksystem Sr950 Firmware

Thinksystem St250 Firmware

Thinksystem St250 V2 Firmware

Thinksystem St258 Firmware

Thinksystem St258 V2 Firmware

Thinksystem St550 Firmware

Thinksystem St650 V2 Firmware

Thinksystem St658 V2 Firmware

Configuration A

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Lenovo Thinkagile Hx5530 Firmware	Before 2.93_afbt30p

Running on/with	Platform Versions
Lenovo Thinkagile Hx5530	All versions

Configuration C

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Lenovo Thinkagile Vx3331 Firmware	Before 2.93_afbt30p

Running on/with	Platform Versions
Lenovo Thinkagile Vx3331	All versions

Configuration D

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Lenovo Thinkagile Hx Enclosure Firmware	Before 3.72_tei388s

Running on/with	Platform Versions
Lenovo Thinkagile Hx Enclosure	All versions

Configuration E

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Lenovo Thinkagile Hx1021 Firmware	Before 3.72_tei388s

Running on/with	Platform Versions
Lenovo Thinkagile Hx1021	All versions

Configuration F

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Lenovo Thinkagile Hx1320 Firmware	Before 8.88_cdi3a4a

Running on/with	Platform Versions
Lenovo Thinkagile Hx1320	All versions

Configuration G

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Lenovo Thinkagile Hx1321 Firmware	Before 8.88_cdi3a4a

Running on/with	Platform Versions
Lenovo Thinkagile Hx1321	All versions

Configuration H

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Lenovo Thinkagile Hx1331 Firmware	Before 2.93_afbt30p

Running on/with	Platform Versions
Lenovo Thinkagile Hx1331	All versions

Configuration I

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Lenovo Thinkagile Hx1520 R Firmware	Before 8.88_cdi3a4a

Running on/with	Platform Versions
Lenovo Thinkagile Hx1520 R	All versions

Configuration J

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Lenovo Thinkagile Hx1521 R Firmware	Before 8.88_cdi3a4a

Running on/with	Platform Versions
Lenovo Thinkagile Hx1521 R	All versions

Configuration K

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Lenovo Thinkagile Hx2320 E Firmware	Before 8.88_cdi3a4a

Running on/with	Platform Versions
Lenovo Thinkagile Hx2320 E	All versions

Configuration L

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Lenovo Thinkagile Hx2321 Firmware	Before 8.88_cdi3a4a

Running on/with	Platform Versions
Lenovo Thinkagile Hx2321	All versions

Configuration M

2 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Lenovo Thinkagile Hx2330 Firmware	Before 2.93_afbt30p
Lenovo Thinkagile Hx2330 Firmware	Version 2.93_afbt30p

Running on/with	Platform Versions
Lenovo Thinkagile Hx2330	All versions

Configuration N

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Lenovo Thinkagile Hx2331 Firmware	Before 2.93_afbt30p

Running on/with	Platform Versions
Lenovo Thinkagile Hx2331	All versions

Configuration O

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Lenovo Thinkagile Hx2720 E Firmware	Before 3.72_tei388s

Running on/with	Platform Versions
Lenovo Thinkagile Hx2720 E	All versions

Configuration P

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Lenovo Thinkagile Hx3320 Firmware	Before 8.88_cdi3a4a

Running on/with	Platform Versions
Lenovo Thinkagile Hx3320	All versions

Configuration Q

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Lenovo Thinkagile Hx3321 Firmware	Before 8.88_cdi3a4a

Running on/with	Platform Versions
Lenovo Thinkagile Hx3321	All versions

Configuration R

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Lenovo Thinkagile Hx3330 Firmware	Before 2.93_afbt30p

Running on/with	Platform Versions
Lenovo Thinkagile Hx3330	All versions

Configuration S

1 vulnerable

Vulnerable Software	Affected Versions
Lenovo Thinkagile Hx3331 Firmware	Before 2.93_afbt30p

Configuration T

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Lenovo Thinkagile Hx3331 Firmware	Before 4.71_d8bt48p

Running on/with	Platform Versions
Lenovo Thinkagile Hx3331	All versions

Configuration U

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Lenovo Thinkagile Hx3375 Firmware	Before 4.71_d8bt48p

Running on/with	Platform Versions
Lenovo Thinkagile Hx3375	All versions

Configuration V

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Lenovo Thinkagile Hx3376 Firmware	Before 8.88_cdi3a4a

Running on/with	Platform Versions
Lenovo Thinkagile Hx3376	All versions

Configuration W

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Lenovo Thinkagile Hx3520 G Firmware	Before 8.88_cdi3a4a

Running on/with	Platform Versions
Lenovo Thinkagile Hx3520 G	All versions

Configuration X

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Lenovo Thinkagile Hx3521 G Firmware	Before 3.72_tei388s

Running on/with	Platform Versions
Lenovo Thinkagile Hx3521 G	All versions

Configuration Y

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Lenovo Thinkagile Hx3720 Firmware	Before 3.72_tei388s

Running on/with	Platform Versions
Lenovo Thinkagile Hx3720	All versions

Configuration Z

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Lenovo Thinkagile Hx3721 Firmware	Before 8.88_cdi3a4a

Running on/with	Platform Versions
Lenovo Thinkagile Hx3721	All versions

Configuration A

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Lenovo Thinkagile Hx5520 Firmware	Before 8.88_cdi3a4a

Running on/with	Platform Versions
Lenovo Thinkagile Hx5520	All versions

Configuration B

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Lenovo Thinkagile Hx5520 C Firmware	Before 8.88_cdi3a4a

Running on/with	Platform Versions
Lenovo Thinkagile Hx5520 C	All versions

Configuration C

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Lenovo Thinkagile Hx5521 Firmware	Before 8.88_cdi3a4a

Running on/with	Platform Versions
Lenovo Thinkagile Hx5521	All versions

Configuration D

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Lenovo Thinkagile Hx5521 C Firmware	Before 2.93_afbt30p

Running on/with	Platform Versions
Lenovo Thinkagile Hx5521 C	All versions

Configuration E

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Lenovo Thinkagile Hx5531 Firmware	Before 8.88_cdi3a4a

Running on/with	Platform Versions
Lenovo Thinkagile Hx5531	All versions

Configuration F

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Lenovo Thinkagile Hx7520 Firmware	Before 8.88_cdi3a4a

Running on/with	Platform Versions
Lenovo Thinkagile Hx7520	All versions

Configuration G

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Lenovo Thinkagile Hx7521 Firmware	Before 2.93_afbt30p

Running on/with	Platform Versions
Lenovo Thinkagile Hx7521	All versions

Configuration H

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Lenovo Thinkagile Hx7530 Firmware	Before 2.93_afbt30p

Running on/with	Platform Versions
Lenovo Thinkagile Hx7530	All versions

Configuration I

1 vulnerable

Vulnerable Software	Affected Versions
Lenovo Thinkagile Hx7531 Firmware	Before 2.93_afbt30p

Configuration J

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Lenovo Thinkagile Hx7531 Firmware	Before 2.75_psi348s

Running on/with	Platform Versions
Lenovo Thinkagile Hx7531	All versions

Configuration K

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Lenovo Thinkagile Hx7820 Firmware	Before 2.75_psi348s

Running on/with	Platform Versions
Lenovo Thinkagile Hx7820	All versions

Configuration L

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Lenovo Thinkagile Hx7821 Firmware	Before 3.72_tei388s

Running on/with	Platform Versions
Lenovo Thinkagile Hx7821	All versions

Configuration M

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Lenovo Thinkagile Mx1020 Firmware	Before 2.93_afbt30p

Running on/with	Platform Versions
Lenovo Thinkagile Mx1020	All versions

Configuration N

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Lenovo Thinkagile Mx3330 F Firmware	Before 2.93_afbt30p

Running on/with	Platform Versions
Lenovo Thinkagile Mx3330 F	All versions

Configuration O

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Lenovo Thinkagile Mx3330 H Firmware	Before 2.93_afbt30p

Running on/with	Platform Versions
Lenovo Thinkagile Mx3330 H	All versions

Configuration P

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Lenovo Thinkagile Mx3331 F Firmware	Before 2.93_afbt30p

Running on/with	Platform Versions
Lenovo Thinkagile Mx3331 F	All versions

Configuration Q

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Lenovo Thinkagile Mx3331 H Firmware	Before 2.93_afbt30p

Running on/with	Platform Versions
Lenovo Thinkagile Mx3331 H	All versions

Configuration R

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Lenovo Thinkagile Mx3530 F Firmware	Before 2.93_afbt30p

Running on/with	Platform Versions
Lenovo Thinkagile Mx3530 F	All versions

Configuration S

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Lenovo Thinkagile Mx3530 H Firmware	Before 2.93_afbt30p

Running on/with	Platform Versions
Lenovo Thinkagile Mx3530 H	All versions

Configuration T

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Lenovo Thinkagile Mx3531 H Firmware	Before 2.93_afbt30p

Running on/with	Platform Versions
Lenovo Thinkagile Mx3531 H	All versions

Configuration U

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Lenovo Thinkagile Mx3531 F Firmware	Before 3.72_tei388s

Running on/with	Platform Versions
Lenovo Thinkagile Mx3531 F	All versions

Configuration V

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Lenovo Thinkagile Mx1021 On Se350 Firmware	Before 3.72_tei388s

Running on/with	Platform Versions
Lenovo Thinkagile Mx1021 On Se350	All versions

Configuration W

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Lenovo Thinkagile Vx 1se Firmware	Before 3.72_tei388s

Running on/with	Platform Versions
Lenovo Thinkagile Vx 1se	All versions

Configuration X

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Lenovo Thinkagile Vx 2u4n Firmware	Before 3.72_tei388s

Running on/with	Platform Versions
Lenovo Thinkagile Vx 2u4n	All versions

Configuration Y

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Lenovo Thinkagile Vx 4u Firmware	Before 2.75_psi348s

Running on/with	Platform Versions
Lenovo Thinkagile Vx 4u	All versions

Configuration Z

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Lenovo Thinkagile Vx1320 Firmware	Before 3.72_tei388s

Running on/with	Platform Versions
Lenovo Thinkagile Vx1320	All versions

Configuration A

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Lenovo Thinkagile Vx2320 Firmware	Before 8.88_cdi3a4a

Running on/with	Platform Versions
Lenovo Thinkagile Vx2320	All versions

Configuration B

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Lenovo Thinkagile Vx2330 Firmware	Before 2.93_afbt30p

Running on/with	Platform Versions
Lenovo Thinkagile Vx2330	All versions

Configuration C

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Lenovo Thinkagile Vx3320 Firmware	Before 8.88_cdi3a4a

Running on/with	Platform Versions
Lenovo Thinkagile Vx3320	All versions

Configuration D

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Lenovo Thinkagile Vx3330 Firmware	Before 2.93_afbt30p

Running on/with	Platform Versions
Lenovo Thinkagile Vx3330	All versions

Configuration E

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Lenovo Thinkagile Vx3520 G Firmware	Before 8.88_cdi3a4a

Running on/with	Platform Versions
Lenovo Thinkagile Vx3520 G	All versions

Configuration F

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Lenovo Thinkagile Vx3530 G Firmware	Before 2.93_afbt30p

Running on/with	Platform Versions
Lenovo Thinkagile Vx3530 G	All versions

Configuration G

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Lenovo Thinkagile Vx3720 Firmware	Before 3.72_tei388s

Running on/with	Platform Versions
Lenovo Thinkagile Vx3720	All versions

Configuration H

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Lenovo Thinkagile Vx5520 Firmware	Before 8.88_cdi3a4a

Running on/with	Platform Versions
Lenovo Thinkagile Vx5520	All versions

Configuration I

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Lenovo Thinkagile Vx5530 Firmware	Before 2.93_afbt30p

Running on/with	Platform Versions
Lenovo Thinkagile Vx5530	All versions

Configuration J

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Lenovo Thinkagile Vx7320 N Firmware	Before 8.88_cdi3a4a

Running on/with	Platform Versions
Lenovo Thinkagile Vx7320 N	All versions

Configuration K

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Lenovo Thinkagile Vx7330 Firmware	Before 2.93_afbt30p

Running on/with	Platform Versions
Lenovo Thinkagile Vx7330	All versions

Configuration L

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Lenovo Thinkagile Vx7520 Firmware	Before 8.88_cdi3a4a

Running on/with	Platform Versions
Lenovo Thinkagile Vx7520	All versions

Configuration M

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Lenovo Thinkagile Vx7520 N Firmware	Before 8.88_cdi3a4a

Running on/with	Platform Versions
Lenovo Thinkagile Vx7520 N	All versions

Configuration N

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Lenovo Thinkagile Vx7530 Firmware	Before 2.93_afbt30p

Running on/with	Platform Versions
Lenovo Thinkagile Vx7530	All versions

Configuration O

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Lenovo Thinkagile Vx7531 Firmware	Before 2.93_afbt30p

Running on/with	Platform Versions
Lenovo Thinkagile Vx7531	All versions

Configuration P

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Lenovo Thinkagile Vx7820 Firmware	Before 2.75_psi348s

Running on/with	Platform Versions
Lenovo Thinkagile Vx7820	All versions

Configuration Q

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Lenovo Thinkedge Se450 Firmware	Before 1.60_usx324o

Running on/with	Platform Versions
Lenovo Thinkedge Se450	All versions

Configuration R

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Lenovo Thinkstation P920 Firmware	Before 8.88_cdi3a4a

Running on/with	Platform Versions
Lenovo Thinkstation P920	All versions

Configuration S

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Lenovo Thinksystem Sd530 Firmware	Before 3.72_tei388s

Running on/with	Platform Versions
Lenovo Thinksystem Sd530	All versions

Configuration T

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Lenovo Thinksystem Sd630 V2 Firmware	Before 2.60_tgbt42h

Running on/with	Platform Versions
Lenovo Thinksystem Sd630 V2	All versions

Configuration U

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Lenovo Thinksystem Sd650 Firmware	Before 3.72_tei388s

Running on/with	Platform Versions
Lenovo Thinksystem Sd650	All versions

Configuration V

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Lenovo Thinksystem Sd650 V2 Firmware	Before 2.60_tgbt42h

Running on/with	Platform Versions
Lenovo Thinksystem Sd650 V2	All versions

Configuration W

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Lenovo Thinksystem Sd650 N V2 Firmware	Before 2.60_tgbt42h

Running on/with	Platform Versions
Lenovo Thinksystem Sd650 N V2	All versions

Configuration X

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Lenovo Thinksystem Se350 Firmware	Before 3.72_tei388s

Running on/with	Platform Versions
Lenovo Thinksystem Se350	All versions

Configuration Y

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Lenovo Thinksystem Sn550 Firmware	Before 3.72_tei388s

Running on/with	Platform Versions
Lenovo Thinksystem Sn550	All versions

Configuration Z

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Lenovo Thinksystem Sn550 V2 Firmware	Before 2.60_tgbt42h

Running on/with	Platform Versions
Lenovo Thinksystem Sn550 V2	All versions

Configuration A

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Lenovo Thinksystem Sn850 Firmware	Before 3.72_tei388s

Running on/with	Platform Versions
Lenovo Thinksystem Sn850	All versions

Configuration B

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Lenovo Thinksystem Sr150 Firmware	Before 3.72_tei388s

Running on/with	Platform Versions
Lenovo Thinksystem Sr150	All versions

Configuration C

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Lenovo Thinksystem Sr158 Firmware	Before 3.72_tei388s

Running on/with	Platform Versions
Lenovo Thinksystem Sr158	All versions

Configuration D

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Lenovo Thinksystem Sr250 Firmware	Before 3.72_tei388s

Running on/with	Platform Versions
Lenovo Thinksystem Sr250	All versions

Configuration E

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Lenovo Thinksystem Sr250 V2 Firmware	Before 2.60_tgbt42h

Running on/with	Platform Versions
Lenovo Thinksystem Sr250 V2	All versions

Configuration F

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Lenovo Thinksystem Sr258 Firmware	Before 3.72_tei388s

Running on/with	Platform Versions
Lenovo Thinksystem Sr258	All versions

Configuration G

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Lenovo Thinksystem Sr258 V2 Firmware	Before 2.60_tgbt42h

Running on/with	Platform Versions
Lenovo Thinksystem Sr258 V2	All versions

Configuration H

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Lenovo Thinksystem Sr530 Firmware	Before 8.88_cdi3a4a

Running on/with	Platform Versions
Lenovo Thinksystem Sr530	All versions

Configuration I

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Lenovo Thinksystem Sr550 Firmware	Before 8.88_cdi3a4a

Running on/with	Platform Versions
Lenovo Thinksystem Sr550	All versions

Configuration J

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Lenovo Thinksystem Sr570 Firmware	Before 8.88_cdi3a4a

Running on/with	Platform Versions
Lenovo Thinksystem Sr570	All versions

Configuration K

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Lenovo Thinksystem Sr590 Firmware	Before 8.88_cdi3a4a

Running on/with	Platform Versions
Lenovo Thinksystem Sr590	All versions

Configuration L

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Lenovo Thinksystem Sr630 Firmware	Before 8.88_cdi3a4a

Running on/with	Platform Versions
Lenovo Thinksystem Sr630	All versions

Configuration M

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Lenovo Thinksystem Sr630 V2 Firmware	Before 2.93_afbt30p

Running on/with	Platform Versions
Lenovo Thinksystem Sr630 V2	All versions

Configuration N

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Lenovo Thinksystem Sr645 Firmware	Before 4.71_d8bt48p

Running on/with	Platform Versions
Lenovo Thinksystem Sr645	All versions

Configuration O

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Lenovo Thinksystem Sr645 V3 Firmware	Before 4.71_d8bt48p

Running on/with	Platform Versions
Lenovo Thinksystem Sr645 V3	All versions

Configuration P

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Lenovo Thinksystem Sr650 Firmware	Before 8.88_cdi3a4a

Running on/with	Platform Versions
Lenovo Thinksystem Sr650	All versions

Configuration Q

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Lenovo Thinksystem Sr650 V2 Firmware	Before 2.93_afbt30p

Running on/with	Platform Versions
Lenovo Thinksystem Sr650 V2	All versions

Configuration R

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Lenovo Thinksystem Sr665 Firmware	Before 4.71_d8bt48p

Running on/with	Platform Versions
Lenovo Thinksystem Sr665	All versions

Configuration S

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Lenovo Thinksystem Sr665 V3 Firmware	Before 4.71_d8bt48p

Running on/with	Platform Versions
Lenovo Thinksystem Sr665 V3	All versions

Configuration T

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Lenovo Thinksystem Sr670 Firmware	Before 3.72_tei388s

Running on/with	Platform Versions
Lenovo Thinksystem Sr670	All versions

Configuration U

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Lenovo Thinksystem Sr670 V2 Firmware	Before 2.60_tgbt42h

Running on/with	Platform Versions
Lenovo Thinksystem Sr670 V2	All versions

Configuration V

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Lenovo Thinksystem Sr850 Firmware	Before 3.72_tei388s

Running on/with	Platform Versions
Lenovo Thinksystem Sr850	All versions

Configuration W

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Lenovo Thinksystem Sr850 V2 Firmware	Before 2.60_tgbt42h

Running on/with	Platform Versions
Lenovo Thinksystem Sr850 V2	All versions

Configuration X

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Lenovo Thinksystem Sr850p Firmware	Before 3.72_tei388s

Running on/with	Platform Versions
Lenovo Thinksystem Sr850p	All versions

Configuration Y

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Lenovo Thinksystem Sr860 Firmware	Before 3.72_tei388s

Running on/with	Platform Versions
Lenovo Thinksystem Sr860	All versions

Configuration Z

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Lenovo Thinksystem Sr860 V2 Firmware	Before 2.60_tgbt42h

Running on/with	Platform Versions
Lenovo Thinksystem Sr860 V2	All versions

Configuration A

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Lenovo Thinksystem Sr950 Firmware	Before 2.75_psi348s

Running on/with	Platform Versions
Lenovo Thinksystem Sr950	All versions

Configuration B

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Lenovo Thinksystem St250 Firmware	Before 3.72_tei388s

Running on/with	Platform Versions
Lenovo Thinksystem St250	All versions

Configuration C

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Lenovo Thinksystem St250 V2 Firmware	Before 2.60_tgbt42h

Running on/with	Platform Versions
Lenovo Thinksystem St250 V2	All versions

Configuration D

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Lenovo Thinksystem St258 Firmware	Before 3.72_tei388s

Running on/with	Platform Versions
Lenovo Thinksystem St258	All versions

Configuration E

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Lenovo Thinksystem St258 V2 Firmware	Before 2.60_tgbt42h

Running on/with	Platform Versions
Lenovo Thinksystem St258 V2	All versions

Configuration F

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Lenovo Thinksystem St550 Firmware	Before 8.88_cdi3a4a

Running on/with	Platform Versions
Lenovo Thinksystem St550	All versions

Configuration G

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Lenovo Thinksystem St650 V2 Firmware	Before 2.60_tgbt42h

Running on/with	Platform Versions
Lenovo Thinksystem St650 V2	All versions

Configuration H

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Lenovo Thinksystem St658 V2 Firmware	Before 2.60_tgbt42h

Running on/with	Platform Versions
Lenovo Thinksystem St658 V2	All versions

Related CWEs

CWE-276

Incorrect Default Permissions

During installation, installed file permissions are set to allow anyone to modify those files.

References (2)

https://support.lenovo.com/us/en/product_security/LEN-118321

Source: psirt@lenovo.com

Vendor Advisory

https://support.lenovo.com/us/en/product_security/LEN-118321

Source: af854a3a-2127-422b-91ae-364da2661108

Vendor Advisory

Timeline

No history available yet.