Approved changes feed: RSS · Atom

cpe:2.3:h:lenovo:thinkagile_hx3331:-:*:*:*:*:*:*:*

part: h version: - update: *

VendorLenovo (c98ed681-bc65-5c44-8bbb-e0a228f96d0e)
ProductThinkagile Hx3331 (cb4ef7ad-73ca-593d-8a38-d54b7b6613cc)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2024-38512 vulnerable 2026-06-08 06:41:47.552724 Details available
HIGH (7.2)
A privilege escalation vulnerability was discovered in XCC that could allow an authenticated XCC user with elevated privileges to perform command injection via specially crafted IPMI commands.
Published: 2024-07-26T19:45:31.829Z
Updated: 2024-08-02T04:12:25.173Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-38511 vulnerable 2026-06-08 06:41:47.546277 Details available
HIGH (7.2)
A privilege escalation vulnerability was discovered in an upload processing functionality of XCC that could allow an authenticated XCC user with elevated privileges to perform command injection via specially crafted file uploads.
Published: 2024-07-26T19:45:21.293Z
Updated: 2024-08-02T04:12:25.141Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-38510 vulnerable 2026-06-08 06:41:47.530477 Details available
HIGH (7.2)
A privilege escalation vulnerability was discovered in the SSH captive command shell interface that could allow an authenticated XCC user with elevated privileges to perform command injection via specially crafted file uploads.
Published: 2024-07-26T19:45:12.150Z
Updated: 2024-08-02T04:12:24.688Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-38509 vulnerable 2026-06-08 06:41:47.522948 Details available
HIGH (7.2)
A privilege escalation vulnerability was discovered in XCC that could allow an authenticated XCC user with elevated privileges to execute arbitrary code via a specially crafted IPMI command.
Published: 2024-07-26T19:45:01.471Z
Updated: 2024-08-02T04:12:24.979Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-38508 vulnerable 2026-06-08 06:41:47.450252 Details available
HIGH (7.2)
A privilege escalation vulnerability was discovered in the web interface or SSH captive command shell interface of XCC that could allow an authenticated XCC user with elevated privileges to perform command injection via a specially crafted request.
Published: 2024-07-26T19:44:50.100Z
Updated: 2024-08-02T04:12:25.569Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-2659 not_vulnerable 2026-06-08 06:33:31.770122 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-4608 not_vulnerable 2026-06-08 06:16:13.775574 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-4607 not_vulnerable 2026-06-08 06:16:13.650938 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-4606 not_vulnerable 2026-06-08 06:16:13.568105 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-29058 not_vulnerable 2026-06-08 06:02:38.420388 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-29057 not_vulnerable 2026-06-08 06:02:38.395637 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-29056 not_vulnerable 2026-06-08 06:02:38.227384 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-25495 not_vulnerable 2026-06-08 05:56:09.054143 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-25492 not_vulnerable 2026-06-08 05:56:08.927376 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-0683 not_vulnerable 2026-06-08 05:52:32.294070 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-40137 not_vulnerable 2026-06-08 05:48:23.935563 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-40134 not_vulnerable 2026-06-08 05:48:23.157796 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.