Default status is the baseline for the product, each version can override it (e.g. patched versions marked unaffected).
| Vendor | Product | Default status | Versions | ||||||
|---|---|---|---|---|---|---|---|---|---|
| Lenovo | XClarity Controller | unaffected |
|
No data.
No data.
No data available yet.
Vendor Solution
Update to the version (or newer) indicated for your model in the Product Impact section in the advisory: https://support.lenovo.com/us/en/product_security/LEN-156781
| Source | ID | Title |
|---|---|---|
EUVD |
EUVD-2024-37381 | A privilege escalation vulnerability was discovered in XCC that could allow an authenticated XCC user with elevated privileges to execute arbitrary code via a specially crafted IPMI command. |
No CVSS v4.0
No CVSS v3.0
No CVSS v2
This CVE is not in the KEV list.
Exploit prediction score: < 1% (0.550% probability within 30 days)
Key SSVC decision points have not yet been added.
| Link | Providers |
|---|---|
| https://support.lenovo.com/us/en/product_security/LEN-156781 |
|
No history.
No data.
No data.
OpenCVE enrichment
No data
No data.
EUVD