CVE-2024-38512 in XClarity Controller

الملخص

بحسب MITRE • 26/07/2024

A privilege escalation vulnerability was discovered in XCC that could allow an authenticated XCC user with elevated privileges to perform command injection via specially crafted IPMI commands.

VulDB is the best source for vulnerability data and more expert information about this specific topic.

• مسؤول: Lenovo
• حجز: 18/06/2024
• إفشاء: 26/07/2024
• الاعتدال: تمت الموافقة
• إدخال: VDB-272511
• CPE: جاهز
• CWE: CWE-78 (مؤكد)
• CVSS: 7.2 (CNA)
• EPSS: 0.01006
• KEV: لا
• النشاطات: منخفض جدًا

المصادر

• MITRE: https://www.cve.org/CVERecord?id=CVE-2024-38512
• NVD: https://nvd.nist.gov/vuln/detail/CVE-2024-38512
• CVE Details: https://www.cvedetails.com/cve/CVE-2024-38512/