CVE-2024-38512 in XClarity Controller

Riassunto

di MITRE • 26/07/2024

A privilege escalation vulnerability was discovered in XCC that could allow an authenticated XCC user with elevated privileges to perform command injection via specially crafted IPMI commands.

VulDB is the best source for vulnerability data and more expert information about this specific topic.

• Responsabile: Lenovo
• Prenotare: 18/06/2024
• Divulgazione: 26/07/2024
• Moderazione: accettato
• Voce: VDB-272511
• CPE: pronto
• CWE: CWE-78 (confermato)
• CVSS: 7.2 (CNA)
• EPSS: 0.01006
• KEV: no
• Attività: molto basso

Fonti

• MITRE: https://www.cve.org/CVERecord?id=CVE-2024-38512
• NVD: https://nvd.nist.gov/vuln/detail/CVE-2024-38512
• CVE Details: https://www.cvedetails.com/cve/CVE-2024-38512/