CVE-2024-38511

CVSS 7.2 HIGHEPSS 1.0%CWE-78

Vexday Risk Score

21Baixo

Decisão SSVC (CISA)

Track

Sem sinal de exploração → monitorar

CVSS 7.2EPSS 1.0%KEV nãoPoC —Nuclei —Metasploit —Patch —

Ciclo de vida

26 jul 2024Publicada no NVD

Recomendação: Monitorar — sem sinal de exploração no momento.

A privilege escalation vulnerability was discovered in an upload processing functionality of XCC that could allow an authenticated XCC user with elevated privileges to perform command injection via specially crafted file uploads.

CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H

Produtos afetados

Lenovo · XClarity Controller

Referências

https://support.lenovo.com/us/en/product_security/LEN-156781