high
7.2
CWE
787 121 119
Advisory Published
Updated

CVE-2022-34884: Buffer Overflow

First published: Mon Jan 30 2023(Updated: )

A buffer overflow exists in the Remote Presence subsystem which can potentially allow valid, authenticated users to cause a recoverable subsystem denial of service.

Credit: psirt@lenovo.com

Affected SoftwareAffected VersionHow to fix
Lenovo ThinkAgile VX3331 Firmware<1.80_afbt20n
Lenovo ThinkAgile VX3331 Firmware
Lenovo ThinkAgile HX Enclosure Firmware<5.20_tei3c8m
Lenovo ThinkAgile HX Enclosure Certified Node
Lenovo ThinkAgile HX1021 EDG Firmware<3.60_tei386m
Lenovo ThinkAgile HX1021 Firmware
Lenovo ThinkAgile HX1320 Firmware<8.40-cdi394n
Lenovo ThinkAgile HX1320 Firmware
Lenovo ThinkAgile HX1321 Firmware<8.40-cdi394n
Lenovo ThinkAgile HX1321 Firmware
Lenovo ThinkAgile HX1520-R Firmware<8.40-cdi394n
Lenovo ThinkAgile HX1520-R Firmware
Lenovo ThinkAgile HX1521-R<8.40-cdi394n
Lenovo ThinkAgile HX1521-R Firmware
Lenovo ThinkAgile HX2320-E Firmware<8.40-cdi394n
Lenovo ThinkAgile HX2320-E Firmware
lenovo thinkagile hx2321 firmware<8.40-cdi394n
Lenovo ThinkAgile HX2321
Lenovo ThinkAgile HX2720-E Firmware<5.20_tei3c8m
Lenovo ThinkAgile HX2720-E Firmware
Lenovo ThinkAgile HX3320 Firmware<8.40-cdi394n
Lenovo ThinkAgile HX3320 Firmware
Lenovo ThinkAgile HX3321 Firmware<8.40-cdi394n
Lenovo ThinkAgile HX3321 Firmware
lenovo thinkagile hx3375 firmware<4.10_d8bt38l
Lenovo ThinkAgile HX3375
Lenovo ThinkAgile HX3376 Firmware<4.10_d8bt38l
Lenovo ThinkAgile HX3376 Firmware
Lenovo ThinkAgile HX3520-G Firmware<8.40-cdi394n
Lenovo ThinkAgile HX3520-G
Lenovo ThinkAgile HX3521-G Firmware<8.40-cdi394n
Lenovo ThinkAgile HX3521-G Firmware
Lenovo ThinkAgile HX3720 Firmware<5.20_tei3c8m
Lenovo ThinkAgile HX3720 Firmware
Lenovo ThinkAgile HX3721 Firmware<5.20_tei3c8m
Lenovo ThinkAgile HX3721 Firmware
Lenovo ThinkAgile HX5520 Firmware<8.40-cdi394n
Lenovo ThinkAgile HX5520-C
Lenovo ThinkAgile HX5520-C Firmware<8.40-cdi394n
Lenovo ThinkAgile HX5520
Lenovo ThinkAgile HX5521-C Firmware<8.40-cdi394n
Lenovo ThinkAgile HX5521 Firmware
Lenovo ThinkAgile HX5521 Firmware<8.40-cdi394n
Lenovo ThinkAgile HX5521
lenovo thinkagile hx7520 firmware<8.40-cdi394n
Lenovo ThinkAgile HX7520
Lenovo ThinkAgile HX7521 Firmware<8.40-cdi394n
Lenovo ThinkAgile HX7521 Firmware
Lenovo ThinkAgile HX7820 Firmware<2.50_psi346l
Lenovo ThinkAgile HX7820 Firmware
Lenovo ThinkAgile HX7821 Firmware<2.50_psi346l
Lenovo ThinkAgile HX7821
Lenovo ThinkAgile MX Edge - MX1020 Firmware<=3.60_tei386m
Lenovo ThinkAgile MX Edge - MX1020
Lenovo ThinkAgile MX3330-F Firmware<1.80_afbt20n
Lenovo ThinkAgile MX3330-F Firmware
Lenovo ThinkAgile MX3330-H Firmware<1.80_afbt20n
Lenovo ThinkAgile MX3330-H Firmware
Lenovo ThinkAgile MX3331-F Firmware<1.80_afbt20n
Lenovo ThinkAgile MX3331-F All-Flash
Lenovo ThinkAgile MX3331-H Firmware<1.80_afbt20n
Lenovo ThinkAgile MX3331-H Firmware
Lenovo ThinkAgile MX3530 F Firmware<1.80_afbt20n
Lenovo ThinkAgile MX3530 F Firmware
Lenovo ThinkAgile MX3530-H Firmware<1.80_afbt20n
Lenovo ThinkAgile MX3530-H Firmware
Lenovo ThinkAgile MX3531-F<1.80_afbt20n
Lenovo ThinkAgile MX3531-F All-Flash
Lenovo ThinkAgile MX3531 H Firmware<1.80_afbt20n
Lenovo ThinkAgile MX3531 H Hybrid
Lenovo ThinkAgile MX1021 on SE350 Firmware<3.60_tei386m
Lenovo ThinkAgile MX1021 on SE350
Lenovo ThinkAgile VX 1SE Certified Node Firmware<5.20_tei3c8m
Lenovo ThinkAgile VX 1SE Certified Node Firmware
Lenovo ThinkAgile VX 2U4N Firmware<5.20_tei3c8m
Lenovo ThinkAgile VX 2U4N Firmware
Lenovo ThinkAgile VX 4U Firmware<2.50_psi346l
Lenovo ThinkAgile VX 4U Firmware
Lenovo ThinkAgile Vx1320 Firmware<5.20_tei3c8m
Lenovo ThinkAgile Vx1320 Firmware
Lenovo ThinkAgile Vx2320 Firmware<8.40-cdi394n
Lenovo ThinkAgile Vx2320 Firmware
Lenovo ThinkAgile VX2330 Firmware<1.80_afbt20n
Lenovo ThinkAgile VX2330
Lenovo ThinkAgile Vx3320 Firmware<8.40-cdi394n
Lenovo ThinkAgile Vx3320 Firmware
Lenovo ThinkAgile VX3330 Firmware<1.80_afbt20n
Lenovo ThinkAgile VX3330 Firmware
Lenovo ThinkAgile Vx3520-G Firmware<8.40-cdi394n
Lenovo ThinkAgile Vx3520-G Firmware
lenovo thinkagile vx3530-g firmware<1.80_afbt20n
Lenovo ThinkAgile VX3530-G
Lenovo ThinkAgile VX3720 Firmware<5.20_tei3c8m
Lenovo ThinkAgile VX3720 Firmware
Lenovo ThinkAgile VX5520 Firmware<8.40-cdi394n
Lenovo ThinkAgile VX5520 Firmware
Lenovo ThinkAgile VX5530 Firmware<1.80_afbt20n
Lenovo ThinkAgile VX5530 Firmware
Lenovo ThinkAgile VX7320 N Firmware<8.40-cdi394n
Lenovo ThinkAgile VX7320 N
Lenovo ThinkAgile VX7330 Firmware<1.80_afbt20n
Lenovo ThinkAgile VX7330 Firmware
Lenovo ThinkAgile Vx7520 N Firmware<8.40-cdi394n
Lenovo ThinkAgile VX7520
Lenovo ThinkAgile Vx7520 N Firmware<8.40-cdi394n
Lenovo ThinkAgile VX7520
Lenovo ThinkAgile VX7530<1.80_afbt20n
Lenovo ThinkAgile VX7530
lenovo thinkagile vx7531 firmware<1.80_afbt20n
lenovo thinkagile vx7531 firmware
Lenovo ThinkAgile VX7820 Firmware<2.50_psi346l
Lenovo ThinkAgile VX7820
Lenovo ThinkEdge SE450<1.10_usx304w
Lenovo ThinkEdge SE450 Firmware
Lenovo ThinkStation P920 Firmware<8.40-cdi394n
Lenovo ThinkStation P920
Lenovo ThinkSystem SD530<5.20_tei3c8m
Lenovo ThinkSystem SD530 Firmware
Lenovo ThinkSystem SD630 V2<2.00_tgbt36o
Lenovo ThinkSystem SD630 V2 Firmware
Lenovo ThinkSystem SD650 Firmware<5.20_tei3c8m
Lenovo ThinkSystem SD650 V2
Lenovo ThinkSystem SD650-N V2 Firmware<2.00_tgbt36o
Lenovo ThinkSystem SD650 V2 Firmware
Lenovo ThinkSystem SD650-N V2 Firmware<2.00_tgbt36o
Lenovo ThinkSystem SD650-N V2 Firmware
Lenovo ThinkSystem SE350 Firmware<3.60_tei386m
Lenovo ThinkSystem SE350
Lenovo ThinkSystem SN550 V2 Firmware<5.20_tei3c8m
Lenovo ThinkSystem SN550 Firmware
Lenovo ThinkSystem SN550 V2 Firmware<2.00_tgbt36o
Lenovo ThinkSystem SN550 V2 Firmware
lenovo thinksystem sn850 firmware<5.20_tei3c8m
Lenovo ThinkSystem SN850
Lenovo ThinkSystem SR150 Firmware<5.20_tei3c8m
Lenovo ThinkSystem SR150
Lenovo ThinkSystem SR158 Firmware<5.20_tei3c8m
Lenovo ThinkSystem SR158 Firmware
Lenovo ThinkSystem SR250 Firmware<5.20_tei3c8m
Lenovo ThinkSystem SR250 V2
Lenovo ThinkSystem SR250 V2 Firmware<1.96_tgbt34x
Lenovo ThinkSystem SR250 V2 Firmware
Lenovo ThinkSystem SR258 Firmware<5.20_tei3c8m
Lenovo ThinkSystem SR258 V2
lenovo thinksystem sr258 v2 firmware<1.96_tgbt34x
Lenovo ThinkSystem SR258 V2
Lenovo ThinkSystem SR530 Firmware<8.40-cdi394n
Lenovo ThinkSystem SR530
Lenovo ThinkSystem SR550 Firmware<8.40-cdi394n
Lenovo ThinkSystem SR550
Lenovo ThinkSystem SR570 Firmware<8.40-cdi394n
Lenovo ThinkSystem SR570
Lenovo ThinkSystem SR590 Firmware<8.40-cdi394n
Lenovo ThinkSystem SR590
Lenovo ThinkSystem SR630 Firmware<8.40-cdi394n
Lenovo ThinkSystem SR630 Firmware
Lenovo ThinkSystem SR630 V2<1.80_afbt20n
Lenovo ThinkSystem SR630 V2 Firmware
Lenovo ThinkSystem SR645 Firmware<4.10_d8bt38l
Lenovo ThinkSystem SR645 Firmware
Lenovo ThinkSystem SR650 Firmware<8.40-cdi394n
Lenovo ThinkSystem SR650 V2
Lenovo ThinkSystem SR650 Firmware<1.80_afbt20n
Lenovo ThinkSystem SR650 V2 Firmware
Lenovo ThinkSystem SR665 Firmware<4.10_d8bt38l
Lenovo ThinkSystem SR665
Lenovo ThinkSystem SR670 V2<3.60_tei386m
Lenovo ThinkSystem SR670 V2
Lenovo ThinkSystem SR670 V2<2.00_tgbt36o
Lenovo ThinkSystem SR670
Lenovo ThinkSystem SR850 V3 Firmware<5.20_tei3c8m
Lenovo ThinkSystem SR850P
Lenovo ThinkSystem SR850 V2 Firmware<2.00_tgbt36o
Lenovo ThinkSystem SR850 V2 Firmware
Lenovo ThinkSystem SR850P Firmware<3.60_tei386m
Lenovo ThinkSystem SR850P
Lenovo ThinkSystem SR860 Firmware<5.20_tei3c8m
Lenovo ThinkSystem SR860 Firmware
Lenovo ThinkSystem SR860 V2 Firmware<2.00_tgbt36o
Lenovo ThinkSystem SR860 V2 Firmware
Lenovo ThinkSystem SR950 Firmware<2.50_psi346l
Lenovo ThinkSystem SR950 Firmware
Lenovo ThinkSystem ST250 Firmware<5.20_tei3c8m
Lenovo ThinkSystem ST250 V2
lenovo thinksystem st250 v2 firmware<1.96_tgbt34x
Lenovo ThinkSystem ST250 V2
Lenovo ThinkSystem ST258 Firmware<5.20_tei3c8m
Lenovo ThinkSystem ST258 Firmware
Lenovo ThinkSystem ST258 Firmware<1.96_tgbt34x
Lenovo ThinkSystem ST258 Firmware
Lenovo ThinkSystem ST550 Firmware<8.40-cdi394n
Lenovo ThinkSystem ST550 Firmware
Lenovo ThinkSystem ST650 V2<2.00_tgbt36o
Lenovo ThinkSystem ST650 V2 Firmware
Lenovo ThinkSystem ST658 V2<2.00_tgbt36o
Lenovo ThinkSystem ST658 V2 Firmware

Remedy

Update to the Lenovo XClarity Controller (XCC) version (or higher) as recommended in the Product Impact section in LEN-87734.

Never miss a vulnerability like this again

Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.

Read MoreStart Free Trial

Reference Links

Frequently Asked Questions

  • What is the severity of CVE-2022-34884?

    The severity of CVE-2022-34884 is classified as high due to the potential for a denial of service.

  • How do I fix CVE-2022-34884?

    To fix CVE-2022-34884, update the affected Lenovo firmware to a version later than 1.80_afbt20n or 5.20_tei3c8m.

  • What products are affected by CVE-2022-34884?

    CVE-2022-34884 affects various Lenovo ThinkAgile firmware versions, particularly those prior to 1.80_afbt20n or 5.20_tei3c8m.

  • What type of vulnerability is CVE-2022-34884?

    CVE-2022-34884 is a buffer overflow vulnerability in the Remote Presence subsystem.

  • Can authenticated users exploit CVE-2022-34884?

    Yes, valid authenticated users could potentially exploit CVE-2022-34884 to cause a recoverable denial of service.

Company

Resources

Contact

SecAlerts Pty Ltd.
132 Wickham Terrace
Fortitude Valley,
QLD 4006, Australia
info@secalerts.co
By using SecAlerts services, you agree to our services end-user license agreement. This website is safeguarded by reCAPTCHA and governed by the Google Privacy Policy and Terms of Service. All names, logos, and brands of products are owned by their respective owners, and any usage of these names, logos, and brands for identification purposes only does not imply endorsement. If you possess any content that requires removal, please get in touch with us.
© 2025 SecAlerts Pty Ltd.
ABN: 70 645 966 203, ACN: 645 966 203