GCVE - cpe:2.3:h:lenovo:thinkagile_mx3330-h_hybrid:-:*:*:*:*:*:*:*

Approved changes feed: RSS · Atom

cpe:2.3:h:lenovo:thinkagile_mx3330-h_hybrid:-:*:*:*:*:*:*:*

part: h version: - update: *

Vendor	Lenovo (`c98ed681-bc65-5c44-8bbb-e0a228f96d0e`)
Product	Thinkagile Mx3330 H Hybrid (`1ad3402c-55df-54c0-83d4-f3f83fdfd488`)
Edition	*
Language	*
Software edition	*
Target software	*
Target hardware	*
Other	*
Notes	Imported from NVD CPE 2.0 feed

PURL mappings

PURL	Source	Last updated
No PURL mappings for this CPE yet.

Vulnerability references

Identifier	cpeApplicability	Submitted	db.gcve.eu details	Rationale
`CVE:CVE-2023-4608`	not_vulnerable	2026-06-08 06:16:13.776384	Details available MEDIUM (4.1) An authenticated XCC user with elevated privileges can perform blind SQL injection in limited cases through a crafted API command. This affects ThinkSystem v2 and v3 servers with XCC; ThinkSystem v1 servers are not affected. Published: 2023-10-24T20:25:49.416Z Updated: 2024-09-11T20:38:29.704Z Open on db.gcve.eu Reference links https://support.lenovo.com/us/en/product_security/LEN-140960	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2023-4607`	not_vulnerable	2026-06-08 06:16:13.651696	Details available HIGH (7.5) An authenticated XCC user can change permissions for any user through a crafted API command. Published: 2023-10-24T20:25:30.100Z Updated: 2024-12-03T14:39:50.517Z Open on db.gcve.eu Reference links https://support.lenovo.com/us/en/product_security/LEN-140960	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2023-4606`	not_vulnerable	2026-06-08 06:16:13.578731	Details available HIGH (8.1) An authenticated XCC user with Read-Only permission can change a different user’s password through a crafted API command. This affects ThinkSystem v2 and v3 servers with XCC; ThinkSystem v1 servers are not affected. Published: 2023-10-24T20:25:09.243Z Updated: 2024-09-11T18:24:50.644Z Open on db.gcve.eu Reference links https://support.lenovo.com/us/en/product_security/LEN-140960	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2022-40137`	not_vulnerable	2026-06-08 05:48:23.951124	Details available MEDIUM (6.7) A buffer overflow in the WMI SMI Handler in some Lenovo models may allow an attacker with local access and elevated privileges to execute arbitrary code. Published: 2023-01-30T21:26:55.123Z Updated: 2025-03-27T15:20:30.117Z Open on db.gcve.eu Reference links https://support.lenovo.com/us/en/product_security/LEN-94953	Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.