Lenovo THINKAGILE HX1331 FIRMWARE -
Approved changes feed: RSS · Atom
cpe:2.3:o:lenovo:thinkagile_hx1331_firmware:-:*:*:*:*:*:*:*
part: o version: - update: *
| Vendor | Lenovo (c98ed681-bc65-5c44-8bbb-e0a228f96d0e) |
|---|---|
| Product | Thinkagile Hx1331 Firmware (26ea9d6f-1cf7-57aa-a74e-31957823d30f) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from NVD CPE 2.0 feed |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2024-8281 |
vulnerable | 2026-06-08 07:00:23.827059 |
Details available
HIGH (7.2)
An input validation weakness was discovered in XCC that could allow a valid, authenticated XCC user with elevated privileges to perform command injection through specially crafted command line input in the XCC SSH captive shell.
Published: 2024-09-13T17:27:48.442Z
Updated: 2024-09-13T20:53:47.959Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-8280 |
vulnerable | 2026-06-08 07:00:23.795544 |
Details available
HIGH (7.2)
An input validation weakness was discovered in XCC that could allow a valid, authenticated XCC user with elevated privileges to perform command injection or cause a recoverable denial of service using a specially crafted file.
Published: 2024-09-13T17:27:39.022Z
Updated: 2024-09-13T21:01:59.322Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-8279 |
vulnerable | 2026-06-08 07:00:23.768247 |
Details available
HIGH (7.2)
A privilege escalation vulnerability was discovered in XCC that could allow a valid, authenticated XCC user with elevated privileges to perform command injection via specially crafted file uploads.
Published: 2024-09-13T17:27:30.967Z
Updated: 2024-09-13T21:02:15.683Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-8278 |
vulnerable | 2026-06-08 07:00:23.524539 |
Details available
HIGH (7.2)
A privilege escalation vulnerability was discovered in XCC that could allow a valid, authenticated XCC user with elevated privileges to perform command injection via specially crafted IPMI commands.
Published: 2024-09-13T17:27:19.968Z
Updated: 2024-09-13T21:02:31.667Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-45105 |
vulnerable | 2026-06-08 06:45:54.622483 |
Details available
MEDIUM (6.7)
An internal product security audit discovered a UEFI SMM (System Management Mode) callout vulnerability in some ThinkSystem servers that could allow a local attacker with elevated privileges to execute arbitrary code.
Published: 2024-09-13T17:29:08.267Z
Updated: 2024-09-16T17:38:38.871Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-38512 |
vulnerable | 2026-06-08 06:41:47.552241 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-38511 |
vulnerable | 2026-06-08 06:41:47.536541 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-38510 |
vulnerable | 2026-06-08 06:41:47.529985 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-38509 |
vulnerable | 2026-06-08 06:41:47.522354 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-38508 |
vulnerable | 2026-06-08 06:41:47.442448 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2023-4608 |
vulnerable | 2026-06-08 06:16:13.774866 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2023-4607 |
vulnerable | 2026-06-08 06:16:13.650313 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2023-4606 |
vulnerable | 2026-06-08 06:16:13.560015 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.