GCVE - cpe:2.3:o:lenovo:thinkagile_hx5521_firmware:-:*:*:*:*:*:*:*

Approved changes feed: RSS · Atom

cpe:2.3:o:lenovo:thinkagile_hx5521_firmware:-:*:*:*:*:*:*:*

part: o version: - update: *

Vendor	Lenovo (`c98ed681-bc65-5c44-8bbb-e0a228f96d0e`)
Product	Thinkagile Hx5521 Firmware (`1bcbe532-e6df-5867-b5cf-cd499c24a5ab`)
Edition	*
Language	*
Software edition	*
Target software	*
Target hardware	*
Other	*
Notes	Imported from NVD CPE 2.0 feed

PURL mappings

PURL	Source	Last updated
No PURL mappings for this CPE yet.

Vulnerability references

Identifier	cpeApplicability	Submitted	db.gcve.eu details	Rationale
`CVE:CVE-2024-8281`	vulnerable	2026-06-08 07:00:23.828994	Details available HIGH (7.2) An input validation weakness was discovered in XCC that could allow a valid, authenticated XCC user with elevated privileges to perform command injection through specially crafted command line input in the XCC SSH captive shell. Published: 2024-09-13T17:27:48.442Z Updated: 2024-09-13T20:53:47.959Z Open on db.gcve.eu Reference links https://support.lenovo.com/us/en/product_security/LEN-172051	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2024-8280`	vulnerable	2026-06-08 07:00:23.797195	Details available HIGH (7.2) An input validation weakness was discovered in XCC that could allow a valid, authenticated XCC user with elevated privileges to perform command injection or cause a recoverable denial of service using a specially crafted file. Published: 2024-09-13T17:27:39.022Z Updated: 2024-09-13T21:01:59.322Z Open on db.gcve.eu Reference links https://support.lenovo.com/us/en/product_security/LEN-172051	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2024-8279`	vulnerable	2026-06-08 07:00:23.769555	Details available HIGH (7.2) A privilege escalation vulnerability was discovered in XCC that could allow a valid, authenticated XCC user with elevated privileges to perform command injection via specially crafted file uploads. Published: 2024-09-13T17:27:30.967Z Updated: 2024-09-13T21:02:15.683Z Open on db.gcve.eu Reference links https://support.lenovo.com/us/en/product_security/LEN-172051	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2024-8278`	vulnerable	2026-06-08 07:00:23.558241	Details available HIGH (7.2) A privilege escalation vulnerability was discovered in XCC that could allow a valid, authenticated XCC user with elevated privileges to perform command injection via specially crafted IPMI commands. Published: 2024-09-13T17:27:19.968Z Updated: 2024-09-13T21:02:31.667Z Open on db.gcve.eu Reference links https://support.lenovo.com/us/en/product_security/LEN-172051	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2023-4607`	vulnerable	2026-06-08 06:16:13.697655	Details available HIGH (7.5) An authenticated XCC user can change permissions for any user through a crafted API command. Published: 2023-10-24T20:25:30.100Z Updated: 2024-12-03T14:39:50.517Z Open on db.gcve.eu Reference links https://support.lenovo.com/us/en/product_security/LEN-140960	Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.