Vulnerability Monitor

The vendors, products, and vulnerabilities you care about

CVE-2023-4608

An authenticated XCC user with elevated privileges can perform blind SQL injection in limited cases through a crafted API command.  This affects ThinkSystem v2 and v3 servers with XCC; ThinkSystem v1 servers are not affected.

Published

2023-10-25T18:17:41.670

Last Modified

2024-11-21T08:35:32.260

Status

Modified

Source

[email protected]

Severity

CVSSv3.1: 4.1 (MEDIUM)

Weaknesses
  • Type: Primary
    CWE-89
Affected Vendors & Products
Type Vendor Product Version/Range Vulnerable?
Operating System lenovo thinkagile_hx5530_firmware - Yes
Hardware lenovo thinkagile_hx5530 - No
Operating System lenovo thinkagile_hx7530_firmware - Yes
Hardware lenovo thinkagile_hx7530 - No
Operating System lenovo thinkagile_vx3331_firmware - Yes
Hardware lenovo thinkagile_vx3331 - No
Operating System lenovo thinkagile_hx1331_firmware - Yes
Hardware lenovo thinkagile_hx1331 - No
Operating System lenovo thinkagile_hx2330_firmware - Yes
Hardware lenovo thinkagile_hx2330 - No
Operating System lenovo thinkagile_hx2331_firmware - Yes
Hardware lenovo thinkagile_hx2331 - No
Operating System lenovo thinkagile_hx3330_firmware - Yes
Hardware lenovo thinkagile_hx3330 - No
Operating System lenovo thinkagile_hx3331_firmware - Yes
Hardware lenovo thinkagile_hx3331 - No
Operating System lenovo thinkagile_hx3331_firmware - Yes
Hardware lenovo thinkagile_hx3331 - No
Operating System lenovo thinkagile_hx3375_firmware - Yes
Hardware lenovo thinkagile_hx3375 - No
Operating System lenovo thinkagile_hx3376_firmware - Yes
Hardware lenovo thinkagile_hx3376 - No
Operating System lenovo thinkagile_hx5531_firmware - Yes
Hardware lenovo thinkagile_hx5531 - No
Operating System lenovo thinkagile_hx7530_firmware - Yes
Hardware lenovo thinkagile_hx7530 - No
Operating System lenovo thinkagile_hx7531_firmware - Yes
Hardware lenovo thinkagile_hx7531 - No
Operating System lenovo thinkagile_hx7531_firmware - Yes
Hardware lenovo thinkagile_hx7531 - No
Operating System lenovo thinkagile_mx3330-f_all-flash_firmware - Yes
Hardware lenovo thinkagile_mx3330-f_all-flash - No
Operating System lenovo thinkagile_mx3330-h_hybrid_firmware - Yes
Hardware lenovo thinkagile_mx3330-h_hybrid - No
Operating System lenovo thinkagile_mx3331-f_all-flash_firmware - Yes
Hardware lenovo thinkagile_mx3331-f_all-flash - No
Operating System lenovo thinkagile_mx3331-h_hybrid_firmware - Yes
Hardware lenovo thinkagile_mx3331-h_hybrid - No
Operating System lenovo thinkagile_mx3530_f_all_flash_firmware - Yes
Hardware lenovo thinkagile_mx3530_f_all_flash - No
Operating System lenovo thinkagile_mx3530-h_hybrid_firmware - Yes
Hardware lenovo thinkagile_mx3530-h_hybrid - No
Operating System lenovo thinkagile_mx3531_h_hybrid_firmware - Yes
Hardware lenovo thinkagile_mx3531_h_hybrid - No
Operating System lenovo thinkagile_mx3531-f_all-flash_firmware - Yes
Hardware lenovo thinkagile_mx3531-f_all-flash - No
Operating System lenovo thinkagile_vx2330_firmware - Yes
Hardware lenovo thinkagile_vx2330 - No
Operating System lenovo thinkagile_vx3330_firmware - Yes
Hardware lenovo thinkagile_vx3330 - No
Operating System lenovo thinkagile_vx3530-g_firmware - Yes
Hardware lenovo thinkagile_vx3530-g - No
Operating System lenovo thinkagile_vx5530_firmware - Yes
Hardware lenovo thinkagile_vx5530 - No
Operating System lenovo thinkagile_vx7330_firmware - Yes
Hardware lenovo thinkagile_vx7330 - No
Operating System lenovo thinkagile_vx7530_firmware - Yes
Hardware lenovo thinkagile_vx7530 - No
Operating System lenovo thinkagile_vx7531_firmware - Yes
Hardware lenovo thinkagile_vx7531 - No
Operating System lenovo thinksystem_sd630_v2_firmware - Yes
Hardware lenovo thinksystem_sd630_v2 - No
Operating System lenovo thinksystem_sd650_v2_firmware - Yes
Hardware lenovo thinksystem_sd650_v2 - No
Operating System lenovo thinksystem_sd650_v3_firmware - Yes
Operating System lenovo thinksystem_sd650-n_v2_firmware - Yes
Hardware lenovo thinksystem_sd650-n_v2 - No
Operating System lenovo thinksystem_sd665_v3_firmware - Yes
Operating System lenovo thinksystem_sn550_v2_firmware - Yes
Hardware lenovo thinksystem_sn550_v2 - No
Operating System lenovo thinksystem_sr250_firmware - Yes
Hardware lenovo thinksystem_sr250_v2 - No
Operating System lenovo thinksystem_sr258_v2_firmware - Yes
Hardware lenovo thinksystem_sr258_v2 - No
Operating System lenovo thinksystem_sr630_v2_firmware - Yes
Hardware lenovo thinksystem_sr630_v2 - No
Operating System lenovo thinksystem_sr630_v3_firmware - Yes
Operating System lenovo thinksystem_sr635_v3_firmware - Yes
Operating System lenovo thinksystem_sr645_firmware - Yes
Hardware lenovo thinksystem_sr645 - No
Operating System lenovo thinksystem_sr645_v3_firmware - Yes
Hardware lenovo thinksystem_sr645_v3 - No
Operating System lenovo thinksystem_sr650_v2_firmware - Yes
Hardware lenovo thinksystem_sr650_v2 - No
Operating System lenovo thinksystem_sr650_v3_firmware - Yes
Operating System lenovo thinksystem_sr655_v3_firmware - Yes
Operating System lenovo thinksystem_sr665_firmware - Yes
Hardware lenovo thinksystem_sr665 - No
Operating System lenovo thinksystem_sr665_v3_firmware - Yes
Operating System lenovo thinksystem_sr670_firmware - Yes
Hardware lenovo thinksystem_sr670 - No
Operating System lenovo thinksystem_sr670_v2_firmware - Yes
Hardware lenovo thinksystem_sr670_v2 - No
Operating System lenovo thinksystem_sr675_v3_firmware - Yes
Operating System lenovo thinksystem_sr850_v2_firmware - Yes
Hardware lenovo thinksystem_sr850_v2 - No
Operating System lenovo thinksystem_sr850_v2_firmware - Yes
Hardware lenovo thinksystem_sr850_v2 - No
Operating System lenovo thinksystem_sr850_v3_firmware - Yes
Operating System lenovo thinksystem_sr860_v2_firmware - Yes
Hardware lenovo thinksystem_sr860_v2 - No
Operating System lenovo thinksystem_sr860_v2_firmware - Yes
Hardware lenovo thinksystem_sr860_v2 - No
Operating System lenovo thinksystem_sr860_v3_firmware - Yes
Operating System lenovo thinksystem_st250_v2_firmware - Yes
Hardware lenovo thinksystem_st250_v2 - No
Operating System lenovo thinksystem_st258_v2_firmware - Yes
Hardware lenovo thinksystem_st258_v2 - No
Operating System lenovo thinksystem_st650_v2_firmware - Yes
Hardware lenovo thinksystem_st650_v2 - No
Operating System lenovo thinksystem_st650_v3_firmware - Yes
Operating System lenovo thinksystem_st658_v2_firmware - Yes
Hardware lenovo thinksystem_st658_v2 - No
Operating System lenovo thinksystem_st658_v3_firmware - Yes
References