Lenovo THINKAGILE MX3330-H FIRMWARE
Approved changes feed: RSS · Atom
cpe:2.3:o:lenovo:thinkagile_mx3330-h_firmware:-:*:*:*:*:*:*:*
part: o version: - update: *
| Vendor | Lenovo (c98ed681-bc65-5c44-8bbb-e0a228f96d0e) |
|---|---|
| Product | Thinkagile Mx3330 H Firmware (013dd539-b9ff-5824-a65a-fa16127afdca) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from NVD CPE 2.0 feed |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2024-38512 |
vulnerable | 2026-06-08 06:41:47.553238 |
Details available
HIGH (7.2)
A privilege escalation vulnerability was discovered in XCC that could allow an authenticated XCC user with elevated privileges to perform command injection via specially crafted IPMI commands.
Published: 2024-07-26T19:45:31.829Z
Updated: 2024-08-02T04:12:25.173Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-38511 |
vulnerable | 2026-06-08 06:41:47.547343 |
Details available
HIGH (7.2)
A privilege escalation vulnerability was discovered in an upload processing functionality of XCC that could allow an authenticated XCC user with elevated privileges to perform command injection via specially crafted file uploads.
Published: 2024-07-26T19:45:21.293Z
Updated: 2024-08-02T04:12:25.141Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-38510 |
vulnerable | 2026-06-08 06:41:47.530927 |
Details available
HIGH (7.2)
A privilege escalation vulnerability was discovered in the SSH captive command shell interface that could allow an authenticated XCC user with elevated privileges to perform command injection via specially crafted file uploads.
Published: 2024-07-26T19:45:12.150Z
Updated: 2024-08-02T04:12:24.688Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-38509 |
vulnerable | 2026-06-08 06:41:47.523969 |
Details available
HIGH (7.2)
A privilege escalation vulnerability was discovered in XCC that could allow an authenticated XCC user with elevated privileges to execute arbitrary code via a specially crafted IPMI command.
Published: 2024-07-26T19:45:01.471Z
Updated: 2024-08-02T04:12:24.979Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-38508 |
vulnerable | 2026-06-08 06:41:47.467208 |
Details available
HIGH (7.2)
A privilege escalation vulnerability was discovered in the web interface or SSH captive command shell interface of XCC that could allow an authenticated XCC user with elevated privileges to perform command injection via a specially crafted request.
Published: 2024-07-26T19:44:50.100Z
Updated: 2024-08-02T04:12:25.569Z Reference links |
Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.