Default status is the baseline for the product, each version can override it (e.g. patched versions marked unaffected).
| Vendor | Product | Default status | Versions | ||||||
|---|---|---|---|---|---|---|---|---|---|
| Lenovo | XClarity Controller | unaffected |
|
No data.
No data.
| Vendor | Product | Versions |
|---|---|---|
| Lenovo | Xclarity Controller | — |
Vendor Solution
Update to the version (or newer) indicated for your model in the Product Impact section in the advisory: https://support.lenovo.com/us/en/product_security/LEN-156781
| Source | ID | Title |
|---|---|---|
EUVD |
EUVD-2024-37382 | A privilege escalation vulnerability was discovered in the SSH captive command shell interface that could allow an authenticated XCC user with elevated privileges to perform command injection via specially crafted file uploads. |
No CVSS v4.0
No CVSS v3.0
No CVSS v2
This CVE is not in the KEV list.
Exploit prediction score: 1.1% (1.071% probability within 30 days)
Key SSVC decision points have not yet been added.
| Link | Providers |
|---|---|
| https://support.lenovo.com/us/en/product_security/LEN-156781 |
|
No history.
No data.
OpenCVE enrichment
Updated: Jul 12, 2025, 10:16 PM
EUVD