CVE-2024-38511

CVSS 7.2 HIGHEPSS 1.0%CWE-78

Vexday Risk Score

21Bajo

Decisión SSVC (CISA)

Track

Sin señal de explotación → monitorear

CVSS 7.2EPSS 1.0%KEV nãoPoC —Nuclei —Metasploit —Patch —

Ciclo de vida

26 jul 2024Publicada en NVD

Recomendación: Monitorear — sin señal de explotación por ahora.

A privilege escalation vulnerability was discovered in an upload processing functionality of XCC that could allow an authenticated XCC user with elevated privileges to perform command injection via specially crafted file uploads.

CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H

Productos afectados

Lenovo · XClarity Controller

Referencias

https://support.lenovo.com/us/en/product_security/LEN-156781