Approved changes feed: RSS · Atom

cpe:2.3:o:lenovo:thinkagile_hx1021_edg_firmware:-:*:*:*:*:*:*:*

part: o version: - update: *

VendorLenovo (c98ed681-bc65-5c44-8bbb-e0a228f96d0e)
ProductThinkagile Hx1021 Edg Firmware (5657e2b7-ba75-59fa-af3e-128527a9c1c5)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2024-38512 vulnerable 2026-06-08 06:41:47.552204 Details available
HIGH (7.2)
A privilege escalation vulnerability was discovered in XCC that could allow an authenticated XCC user with elevated privileges to perform command injection via specially crafted IPMI commands.
Published: 2024-07-26T19:45:31.829Z
Updated: 2024-08-02T04:12:25.173Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-38511 vulnerable 2026-06-08 06:41:47.536502 Details available
HIGH (7.2)
A privilege escalation vulnerability was discovered in an upload processing functionality of XCC that could allow an authenticated XCC user with elevated privileges to perform command injection via specially crafted file uploads.
Published: 2024-07-26T19:45:21.293Z
Updated: 2024-08-02T04:12:25.141Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-38510 vulnerable 2026-06-08 06:41:47.529943 Details available
HIGH (7.2)
A privilege escalation vulnerability was discovered in the SSH captive command shell interface that could allow an authenticated XCC user with elevated privileges to perform command injection via specially crafted file uploads.
Published: 2024-07-26T19:45:12.150Z
Updated: 2024-08-02T04:12:24.688Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-38509 vulnerable 2026-06-08 06:41:47.522306 Details available
HIGH (7.2)
A privilege escalation vulnerability was discovered in XCC that could allow an authenticated XCC user with elevated privileges to execute arbitrary code via a specially crafted IPMI command.
Published: 2024-07-26T19:45:01.471Z
Updated: 2024-08-02T04:12:24.979Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-38508 vulnerable 2026-06-08 06:41:47.440486 Details available
HIGH (7.2)
A privilege escalation vulnerability was discovered in the web interface or SSH captive command shell interface of XCC that could allow an authenticated XCC user with elevated privileges to perform command injection via a specially crafted request.
Published: 2024-07-26T19:44:50.100Z
Updated: 2024-08-02T04:12:25.569Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-4607 vulnerable 2026-06-08 06:16:13.673759 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.