CVE-2023-4606

First published: Tue Oct 24 2023(Updated: )

An authenticated XCC user with Read-Only permission can change a different user’s password through a crafted API command.   This affects ThinkSystem v2 and v3 servers with XCC; ThinkSystem v1 servers are not affected.

Credit: psirt@lenovo.com

Never miss a vulnerability like this again

Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.

Read MoreStart Free Trial

• collector/nvd-api
• agent/type
• agent/softwarecombine
• collector/mitre-cve
• source/MITRE
• agent/remedy
• agent/weakness
• agent/author
• agent/last-modified-date
• agent/severity
• agent/references
• agent/tags
• agent/description
• agent/event
• agent/first-publish-date
• vendor/lenovo
• canonical/lenovo thinkagile hx5530 firmware
• canonical/lenovo thinkagile hx5530
• canonical/lenovo thinkagile hx7530 firmware
• canonical/lenovo thinkagile hx7530
• canonical/lenovo thinkagile vx3331 firmware
• canonical/lenovo thinkagile vx3331
• canonical/lenovo thinkagile hx1331 firmware
• canonical/lenovo thinkagile hx1331
• canonical/lenovo thinkagile hx2330 firmware
• canonical/lenovo thinkagile hx2330
• canonical/lenovo thinkagile hx2331 firmware
• canonical/lenovo thinkagile hx2331
• canonical/lenovo thinkagile hx3330 firmware
• canonical/lenovo thinkagile hx3330
• canonical/lenovo thinkagile hx3331 firmware
• canonical/lenovo thinkagile hx3331
• canonical/lenovo thinkagile hx3375 firmware
• canonical/lenovo thinkagile hx3375
• canonical/lenovo thinkagile hx3376 firmware
• canonical/lenovo thinkagile hx3376
• canonical/lenovo thinkagile hx5531 firmware
• canonical/lenovo thinkagile hx5531
• canonical/lenovo thinkagile hx7531 firmware
• canonical/lenovo thinkagile hx7531
• canonical/lenovo thinkagile mx3330-f all-flash firmware
• canonical/lenovo thinkagile mx3330-f all-flash
• canonical/lenovo thinkagile mx3330-h hybrid firmware
• canonical/lenovo thinkagile mx3330-h hybrid
• canonical/lenovo thinkagile mx3331-f all-flash firmware
• canonical/lenovo thinkagile mx3331-f all-flash
• canonical/lenovo thinkagile mx3331-h hybrid firmware
• canonical/lenovo thinkagile mx3331-h hybrid
• canonical/lenovo thinkagile mx3530 f all flash firmware
• canonical/lenovo thinkagile mx3530 f all flash
• canonical/lenovo thinkagile mx3530-h hybrid firmware
• canonical/lenovo thinkagile mx3530-h hybrid
• canonical/lenovo thinkagile mx3531 h hybrid firmware
• canonical/lenovo thinkagile mx3531 h hybrid
• canonical/lenovo thinkagile mx3531-f all-flash firmware
• canonical/lenovo thinkagile mx3531-f all-flash
• canonical/lenovo thinkagile vx2330 firmware
• canonical/lenovo thinkagile vx2330
• canonical/lenovo thinkagile vx3330 firmware
• canonical/lenovo thinkagile vx3330
• canonical/lenovo thinkagile vx3530-g firmware
• canonical/lenovo thinkagile vx3530-g
• canonical/lenovo thinkagile vx5530 firmware
• canonical/lenovo thinkagile vx5530
• canonical/lenovo thinkagile vx7330 firmware
• canonical/lenovo thinkagile vx7330
• canonical/lenovo thinkagile vx7530 firmware
• canonical/lenovo thinkagile vx7530
• canonical/lenovo thinkagile vx7531 firmware
• canonical/lenovo thinkagile vx7531
• canonical/lenovo thinksystem sd630 v2 firmware
• canonical/lenovo thinksystem sd630 v2
• canonical/lenovo thinksystem sd650 v2 firmware
• canonical/lenovo thinksystem sd650 v2
• canonical/lenovo thinksystem sd650 v3 firmware
• canonical/lenovo thinksystem sd650-n v2 firmware
• canonical/lenovo thinksystem sd650-n v2
• canonical/lenovo thinksystem sd665 v3 firmware
• canonical/lenovo thinksystem sn550 v2 firmware
• canonical/lenovo thinksystem sn550 v2
• canonical/lenovo thinksystem sr250 firmware
• canonical/lenovo thinksystem sr250 v2
• canonical/lenovo thinksystem sr258 v2 firmware
• canonical/lenovo thinksystem sr258 v2
• canonical/lenovo thinksystem sr630 v2 firmware
• canonical/lenovo thinksystem sr630 v2
• canonical/lenovo thinksystem sr630 v3 firmware
• canonical/lenovo thinksystem sr635 v3 firmware
• canonical/lenovo thinksystem sr645 firmware
• canonical/lenovo thinksystem sr645
• canonical/lenovo thinksystem sr645 v3 firmware
• canonical/lenovo thinksystem sr645 v3
• canonical/lenovo thinksystem sr650 v2 firmware
• canonical/lenovo thinksystem sr650 v2
• canonical/lenovo thinksystem sr650 v3 firmware
• canonical/lenovo thinksystem sr655 v3 firmware
• canonical/lenovo thinksystem sr665 firmware
• canonical/lenovo thinksystem sr665
• canonical/lenovo thinksystem sr665 v3 firmware
• canonical/lenovo thinksystem sr670 firmware
• canonical/lenovo thinksystem sr670
• canonical/lenovo thinksystem sr670 v2 firmware
• canonical/lenovo thinksystem sr670 v2
• canonical/lenovo thinksystem sr675 v3 firmware
• canonical/lenovo thinksystem sr850 v2 firmware
• canonical/lenovo thinksystem sr850 v2
• canonical/lenovo thinksystem sr850 v3 firmware
• canonical/lenovo thinksystem sr860 v2 firmware
• canonical/lenovo thinksystem sr860 v2
• canonical/lenovo thinksystem sr860 v3 firmware
• canonical/lenovo thinksystem st250 v2 firmware
• canonical/lenovo thinksystem st250 v2
• canonical/lenovo thinksystem st258 v2 firmware
• canonical/lenovo thinksystem st258 v2
• canonical/lenovo thinksystem st650 v2 firmware
• canonical/lenovo thinksystem st650 v2
• canonical/lenovo thinksystem st650 v3 firmware
• canonical/lenovo thinksystem st658 v2 firmware
• canonical/lenovo thinksystem st658 v2
• canonical/lenovo thinksystem st658 v3 firmware