Approved changes feed: RSS · Atom

cpe:2.3:o:lenovo:thinkagile_vx3720_firmware:-:*:*:*:*:*:*:*

part: o version: - update: *

VendorLenovo (c98ed681-bc65-5c44-8bbb-e0a228f96d0e)
ProductThinkagile Vx3720 Firmware (d7b7e864-8455-5e0c-9209-899716367414)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2024-8281 vulnerable 2026-06-08 07:00:23.830081 Details available
HIGH (7.2)
An input validation weakness was discovered in XCC that could allow a valid, authenticated XCC user with elevated privileges to perform command injection through specially crafted command line input in the XCC SSH captive shell.
Published: 2024-09-13T17:27:48.442Z
Updated: 2024-09-13T20:53:47.959Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-8280 vulnerable 2026-06-08 07:00:23.798856 Details available
HIGH (7.2)
An input validation weakness was discovered in XCC that could allow a valid, authenticated XCC user with elevated privileges to perform command injection or cause a recoverable denial of service using a specially crafted file.
Published: 2024-09-13T17:27:39.022Z
Updated: 2024-09-13T21:01:59.322Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-8279 vulnerable 2026-06-08 07:00:23.770855 Details available
HIGH (7.2)
A privilege escalation vulnerability was discovered in XCC that could allow a valid, authenticated XCC user with elevated privileges to perform command injection via specially crafted file uploads.
Published: 2024-09-13T17:27:30.967Z
Updated: 2024-09-13T21:02:15.683Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-8278 vulnerable 2026-06-08 07:00:23.572432 Details available
HIGH (7.2)
A privilege escalation vulnerability was discovered in XCC that could allow a valid, authenticated XCC user with elevated privileges to perform command injection via specially crafted IPMI commands.
Published: 2024-09-13T17:27:19.968Z
Updated: 2024-09-13T21:02:31.667Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-38512 vulnerable 2026-06-08 06:41:47.553598 Details available
HIGH (7.2)
A privilege escalation vulnerability was discovered in XCC that could allow an authenticated XCC user with elevated privileges to perform command injection via specially crafted IPMI commands.
Published: 2024-07-26T19:45:31.829Z
Updated: 2024-08-02T04:12:25.173Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-38511 vulnerable 2026-06-08 06:41:47.547762 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-38510 vulnerable 2026-06-08 06:41:47.531606 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-38509 vulnerable 2026-06-08 06:41:47.524776 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-38508 vulnerable 2026-06-08 06:41:47.475969 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-4607 vulnerable 2026-06-08 06:16:13.727379 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.