Approved changes feed: RSS · Atom

cpe:2.3:o:lenovo:thinkstation_p920_workstation_firmware:-:*:*:*:*:*:*:*

part: o version: - update: *

VendorLenovo (c98ed681-bc65-5c44-8bbb-e0a228f96d0e)
ProductThinkstation P920 Workstation Firmware (9672204c-f9a2-5060-a369-b5d146d48c98)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2024-8281 vulnerable 2026-06-08 07:00:23.828684 Details available
HIGH (7.2)
An input validation weakness was discovered in XCC that could allow a valid, authenticated XCC user with elevated privileges to perform command injection through specially crafted command line input in the XCC SSH captive shell.
Published: 2024-09-13T17:27:48.442Z
Updated: 2024-09-13T20:53:47.959Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-8280 vulnerable 2026-06-08 07:00:23.796874 Details available
HIGH (7.2)
An input validation weakness was discovered in XCC that could allow a valid, authenticated XCC user with elevated privileges to perform command injection or cause a recoverable denial of service using a specially crafted file.
Published: 2024-09-13T17:27:39.022Z
Updated: 2024-09-13T21:01:59.322Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-8279 vulnerable 2026-06-08 07:00:23.769346 Details available
HIGH (7.2)
A privilege escalation vulnerability was discovered in XCC that could allow a valid, authenticated XCC user with elevated privileges to perform command injection via specially crafted file uploads.
Published: 2024-09-13T17:27:30.967Z
Updated: 2024-09-13T21:02:15.683Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-8278 vulnerable 2026-06-08 07:00:23.546047 Details available
HIGH (7.2)
A privilege escalation vulnerability was discovered in XCC that could allow a valid, authenticated XCC user with elevated privileges to perform command injection via specially crafted IPMI commands.
Published: 2024-09-13T17:27:19.968Z
Updated: 2024-09-13T21:02:31.667Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-38512 vulnerable 2026-06-08 06:41:47.553880 Details available
HIGH (7.2)
A privilege escalation vulnerability was discovered in XCC that could allow an authenticated XCC user with elevated privileges to perform command injection via specially crafted IPMI commands.
Published: 2024-07-26T19:45:31.829Z
Updated: 2024-08-02T04:12:25.173Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-38511 vulnerable 2026-06-08 06:41:47.548245 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-38510 vulnerable 2026-06-08 06:41:47.531985 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-38509 vulnerable 2026-06-08 06:41:47.525457 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-38508 vulnerable 2026-06-08 06:41:47.482213 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-45079 vulnerable 2026-06-08 06:12:41.893509 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-45078 vulnerable 2026-06-08 06:12:41.880229 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-45077 vulnerable 2026-06-08 06:12:41.872324 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-45076 vulnerable 2026-06-08 06:12:41.865028 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-45075 vulnerable 2026-06-08 06:12:41.841992 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-43581 vulnerable 2026-06-08 06:12:36.870218 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-43580 vulnerable 2026-06-08 06:12:36.793878 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-43579 vulnerable 2026-06-08 06:12:36.772446 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-43578 vulnerable 2026-06-08 06:12:36.749118 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-43577 vulnerable 2026-06-08 06:12:36.725548 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-43576 vulnerable 2026-06-08 06:12:36.703991 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-43575 vulnerable 2026-06-08 06:12:36.680773 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-43574 vulnerable 2026-06-08 06:12:36.663654 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-43573 vulnerable 2026-06-08 06:12:36.645067 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-43572 vulnerable 2026-06-08 06:12:36.628038 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-43571 vulnerable 2026-06-08 06:12:36.611554 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-43570 vulnerable 2026-06-08 06:12:36.594688 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-43569 vulnerable 2026-06-08 06:12:36.577829 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-43568 vulnerable 2026-06-08 06:12:36.560381 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-43567 vulnerable 2026-06-08 06:12:36.522503 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.