First published: Mon May 01 2023(Updated: )
A valid, authenticated user may be able to trigger a denial of service of the XCC web user interface or other undefined behavior through a format string injection vulnerability in a web interface API.
Credit: psirt@lenovo.com
Affected Software | Affected Version | How to fix |
---|---|---|
lenovo thinkagile hx5530 firmware | <2.93_afbt30p | |
lenovo thinkagile hx5530 | ||
lenovo thinkagile hx7530 firmware | <2.93_afbt30p | |
lenovo thinkagile hx7530 | ||
lenovo thinkagile vx3331 firmware | <2.93_afbt30p | |
lenovo thinkagile vx3331 | ||
lenovo thinkagile hx enclosure firmware | <3.72_tei388s | |
lenovo thinkagile hx enclosure | ||
lenovo thinkagile hx1021 firmware | <3.72_tei388s | |
lenovo thinkagile hx1021 | ||
lenovo thinkagile hx1320 firmware | <8.88_cdi3a4a | |
Lenovo thinkagile hx1320 | ||
lenovo thinkagile hx1321 firmware | <8.88_cdi3a4a | |
Lenovo thinkagile hx1321 | ||
lenovo thinkagile hx1331 firmware | <2.93_afbt30p | |
lenovo thinkagile hx1331 | ||
lenovo thinkagile hx1520-r firmware | <8.88_cdi3a4a | |
Lenovo thinkagile hx1520-r | ||
lenovo thinkagile hx1521-r firmware | <8.88_cdi3a4a | |
Lenovo thinkagile hx1521-r | ||
lenovo thinkagile hx2320-e firmware | <8.88_cdi3a4a | |
Lenovo thinkagile hx2320-e | ||
lenovo thinkagile hx2321 firmware | <8.88_cdi3a4a | |
Lenovo thinkagile hx2321 | ||
lenovo thinkagile hx2330 firmware | <2.93_afbt30p | |
lenovo thinkagile hx2330 firmware | =2.93_afbt30p | |
lenovo thinkagile hx2330 | ||
lenovo thinkagile hx2331 firmware | <2.93_afbt30p | |
lenovo thinkagile hx2331 | ||
lenovo thinkagile hx2720-e firmware | <3.72_tei388s | |
lenovo thinkagile hx2720-e | ||
lenovo thinkagile hx3320 firmware | <8.88_cdi3a4a | |
Lenovo thinkagile hx3320 | ||
lenovo thinkagile hx3321 firmware | <8.88_cdi3a4a | |
Lenovo thinkagile hx3321 | ||
lenovo thinkagile hx3330 firmware | <2.93_afbt30p | |
lenovo thinkagile hx3330 | ||
lenovo thinkagile hx3331 firmware | <2.93_afbt30p | |
lenovo thinkagile hx3331 | ||
lenovo thinkagile hx3331 firmware | <4.71_d8bt48p | |
lenovo thinkagile hx3375 firmware | <4.71_d8bt48p | |
Lenovo thinkagile hx3375 | ||
lenovo thinkagile hx3376 firmware | <8.88_cdi3a4a | |
Lenovo thinkagile hx3376 | ||
lenovo thinkagile hx3520-g firmware | <8.88_cdi3a4a | |
Lenovo thinkagile hx3520-g | ||
lenovo thinkagile hx3521-g firmware | <3.72_tei388s | |
Lenovo thinkagile hx3521-g | ||
lenovo thinkagile hx3720 firmware | <3.72_tei388s | |
lenovo thinkagile hx3720 | ||
lenovo thinkagile hx3721 firmware | <8.88_cdi3a4a | |
lenovo thinkagile hx3721 | ||
lenovo thinkagile hx5520 firmware | <8.88_cdi3a4a | |
Lenovo thinkagile hx5520 | ||
lenovo thinkagile hx5520-c firmware | <8.88_cdi3a4a | |
Lenovo thinkagile hx5520-c | ||
lenovo thinkagile hx5521 firmware | <8.88_cdi3a4a | |
Lenovo thinkagile hx5521 | ||
lenovo thinkagile hx5521-c firmware | <2.93_afbt30p | |
Lenovo thinkagile hx5521-c | ||
lenovo thinkagile hx5531 firmware | <8.88_cdi3a4a | |
lenovo thinkagile hx5531 | ||
lenovo thinkagile hx7520 firmware | <8.88_cdi3a4a | |
lenovo thinkagile hx7520 | ||
lenovo thinkagile hx7521 firmware | <2.93_afbt30p | |
Lenovo thinkagile hx7521 | ||
lenovo thinkagile hx7531 firmware | <2.93_afbt30p | |
lenovo thinkagile hx7531 | ||
lenovo thinkagile hx7531 firmware | <2.75_psi348s | |
lenovo thinkagile hx7820 firmware | <2.75_psi348s | |
Lenovo thinkagile hx7820 | ||
lenovo thinkagile hx7821 firmware | <3.72_tei388s | |
Lenovo thinkagile hx7821 | ||
lenovo thinkagile mx1020 firmware | <2.93_afbt30p | |
lenovo thinkagile mx1020 | ||
lenovo thinkagile mx3330-f firmware | <2.93_afbt30p | |
lenovo thinkagile mx3330-f | ||
lenovo thinkagile mx3330-h firmware | <2.93_afbt30p | |
lenovo thinkagile mx3330-h | ||
lenovo thinkagile mx3331-f firmware | <2.93_afbt30p | |
lenovo thinkagile mx3331-f | ||
lenovo thinkagile mx3331-h firmware | <2.93_afbt30p | |
lenovo thinkagile mx3331-h | ||
lenovo thinkagile mx3530 f firmware | <2.93_afbt30p | |
lenovo thinkagile mx3530 f | ||
lenovo thinkagile mx3530-h firmware | <2.93_afbt30p | |
lenovo thinkagile mx3530-h | ||
lenovo thinkagile mx3531 h firmware | <2.93_afbt30p | |
lenovo thinkagile mx3531 h | ||
lenovo thinkagile mx3531-f firmware | <3.72_tei388s | |
lenovo thinkagile mx3531-f | ||
lenovo thinkagile mx1021 on se350 firmware | <3.72_tei388s | |
lenovo thinkagile mx1021 on se350 | ||
lenovo thinkagile vx 1se firmware | <3.72_tei388s | |
lenovo thinkagile vx 1se | ||
lenovo thinkagile vx 2u4n firmware | <3.72_tei388s | |
lenovo thinkagile vx 2u4n | ||
lenovo thinkagile vx 4u firmware | <2.75_psi348s | |
lenovo thinkagile vx 4u | ||
Lenovo ThinkAgile Vx1320 Firmware | <3.72_tei388s | |
lenovo thinkagile vx1320 | ||
Lenovo ThinkAgile Vx2320 Firmware | <8.88_cdi3a4a | |
Lenovo thinkagile vx2320 | ||
lenovo thinkagile vx2330 firmware | <2.93_afbt30p | |
lenovo thinkagile vx2330 | ||
Lenovo ThinkAgile Vx3320 Firmware | <8.88_cdi3a4a | |
Lenovo thinkagile vx3320 | ||
lenovo thinkagile vx3330 firmware | <2.93_afbt30p | |
lenovo thinkagile vx3330 | ||
Lenovo ThinkAgile Vx3520-G Firmware | <8.88_cdi3a4a | |
Lenovo thinkagile vx3520-g | ||
lenovo thinkagile vx3530-g firmware | <2.93_afbt30p | |
lenovo thinkagile vx3530-g | ||
Lenovo ThinkAgile VX3720 Firmware | <3.72_tei388s | |
lenovo thinkagile vx3720 | ||
Lenovo ThinkAgile VX5520 Firmware | <8.88_cdi3a4a | |
Lenovo thinkagile vx5520 | ||
lenovo thinkagile vx5530 firmware | <2.93_afbt30p | |
lenovo thinkagile vx5530 | ||
Lenovo ThinkAgile VX7320 N Firmware | <8.88_cdi3a4a | |
Lenovo thinkagile vx7320 n | ||
lenovo thinkagile vx7330 firmware | <2.93_afbt30p | |
lenovo thinkagile vx7330 | ||
Lenovo ThinkAgile Vx7520 N Firmware | <8.88_cdi3a4a | |
Lenovo thinkagile vx7520 | ||
Lenovo ThinkAgile Vx7520 N Firmware | <8.88_cdi3a4a | |
lenovo thinkagile vx7520 n | ||
lenovo thinkagile vx7530 firmware | <2.93_afbt30p | |
lenovo thinkagile vx7530 | ||
lenovo thinkagile vx7531 firmware | <2.93_afbt30p | |
lenovo thinkagile vx7531 | ||
Lenovo ThinkAgile VX7820 Firmware | <2.75_psi348s | |
lenovo thinkagile vx7820 | ||
lenovo thinkedge se450 firmware | <1.60_usx324o | |
lenovo thinkedge se450 | ||
lenovo thinkstation p920 firmware | <8.88_cdi3a4a | |
Lenovo thinkstation p920 | ||
lenovo thinksystem sd530 firmware | <3.72_tei388s | |
lenovo thinksystem sd530 | ||
lenovo thinksystem sd630 v2 firmware | <2.60_tgbt42h | |
lenovo thinksystem sd630 v2 | ||
lenovo thinksystem sd650 firmware | <3.72_tei388s | |
Lenovo thinksystem sd650 | ||
lenovo thinksystem sd650 v2 firmware | <2.60_tgbt42h | |
lenovo thinksystem sd650 v2 | ||
lenovo thinksystem sd650-n v2 firmware | <2.60_tgbt42h | |
lenovo thinksystem sd650-n v2 | ||
lenovo thinksystem se350 firmware | <3.72_tei388s | |
Lenovo thinksystem se350 | ||
lenovo thinksystem sn550 firmware | <3.72_tei388s | |
Lenovo thinksystem sn550 | ||
lenovo thinksystem sn550 v2 firmware | <2.60_tgbt42h | |
lenovo thinksystem sn550 v2 | ||
lenovo thinksystem sn850 firmware | <3.72_tei388s | |
Lenovo thinksystem sn850 | ||
lenovo thinksystem sr150 firmware | <3.72_tei388s | |
lenovo thinksystem sr150 | ||
lenovo thinksystem sr158 firmware | <3.72_tei388s | |
lenovo thinksystem sr158 | ||
lenovo thinksystem sr250 firmware | <3.72_tei388s | |
lenovo thinksystem sr250 | ||
lenovo thinksystem sr250 v2 firmware | <2.60_tgbt42h | |
lenovo thinksystem sr250 v2 | ||
lenovo thinksystem sr258 firmware | <3.72_tei388s | |
lenovo thinksystem sr258 | ||
lenovo thinksystem sr258 v2 firmware | <2.60_tgbt42h | |
lenovo thinksystem sr258 v2 | ||
lenovo thinksystem sr530 firmware | <8.88_cdi3a4a | |
Lenovo thinksystem sr530 | ||
lenovo thinksystem sr550 firmware | <8.88_cdi3a4a | |
Lenovo thinksystem sr550 | ||
lenovo thinksystem sr570 firmware | <8.88_cdi3a4a | |
Lenovo thinksystem sr570 | ||
lenovo thinksystem sr590 firmware | <8.88_cdi3a4a | |
Lenovo thinksystem sr590 | ||
Lenovo ThinkSystem SR630 Firmware | <8.88_cdi3a4a | |
Lenovo ThinkSystem SR630 Firmware | ||
lenovo thinksystem sr630 v2 firmware | <2.93_afbt30p | |
lenovo thinksystem sr630 v2 | ||
lenovo thinksystem sr645 firmware | <4.71_d8bt48p | |
Lenovo thinksystem sr645 | ||
lenovo thinksystem sr645 v3 firmware | <4.71_d8bt48p | |
lenovo thinksystem sr645 v3 | ||
lenovo thinksystem sr650 firmware | <8.88_cdi3a4a | |
Lenovo thinksystem sr650 | ||
lenovo thinksystem sr650 v2 firmware | <2.93_afbt30p | |
lenovo thinksystem sr650 v2 | ||
lenovo thinksystem sr665 firmware | <4.71_d8bt48p | |
Lenovo thinksystem sr665 | ||
lenovo thinksystem sr665 v3 firmware | <4.71_d8bt48p | |
lenovo thinksystem sr665 v3 | ||
lenovo thinksystem sr670 firmware | <3.72_tei388s | |
lenovo thinksystem sr670 | ||
lenovo thinksystem sr670 v2 firmware | <2.60_tgbt42h | |
lenovo thinksystem sr670 v2 | ||
lenovo thinksystem sr850 firmware | <3.72_tei388s | |
Lenovo thinksystem sr850 | ||
lenovo thinksystem sr850 v2 firmware | <2.60_tgbt42h | |
lenovo thinksystem sr850 v2 | ||
lenovo thinksystem sr850p firmware | <3.72_tei388s | |
lenovo thinksystem sr850p | ||
lenovo thinksystem sr860 firmware | <3.72_tei388s | |
Lenovo thinksystem sr860 | ||
lenovo thinksystem sr860 v2 firmware | <2.60_tgbt42h | |
lenovo thinksystem sr860 v2 | ||
lenovo thinksystem sr950 firmware | <2.75_psi348s | |
Lenovo thinksystem sr950 | ||
lenovo thinksystem st250 firmware | <3.72_tei388s | |
lenovo thinksystem st250 | ||
lenovo thinksystem st250 v2 firmware | <2.60_tgbt42h | |
lenovo thinksystem st250 v2 | ||
lenovo thinksystem st258 firmware | <3.72_tei388s | |
lenovo thinksystem st258 | ||
lenovo thinksystem st258 v2 firmware | <2.60_tgbt42h | |
lenovo thinksystem st258 v2 | ||
lenovo thinksystem st550 firmware | <8.88_cdi3a4a | |
Lenovo thinksystem st550 | ||
lenovo thinksystem st650 v2 firmware | <2.60_tgbt42h | |
lenovo thinksystem st650 v2 | ||
lenovo thinksystem st658 v2 firmware | <2.60_tgbt42h | |
lenovo thinksystem st658 v2 |
Customers should update to the version (or later) of Lenovo XClarity Controller (XCC) identified in the related Lenovo Product Security Advisory: https://support.lenovo.com/us/en/product_security/LEN-99936 https://support.lenovo.com/us/en/product_security/LEN-99936
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.