Default status is the baseline for the product, each version can override it (e.g. patched versions marked unaffected).
| Vendor | Product | Default status | Versions | ||||||
|---|---|---|---|---|---|---|---|---|---|
| Lenovo | XClarity Controller | unaffected |
|
No data.
No data.
| Vendor | Product | Versions |
|---|---|---|
| Lenovo | Xclarity Controller | — |
Vendor Solution
Update to the version (or newer) indicated for your model in the Product Impact section in the advisory: https://support.lenovo.com/us/en/product_security/LEN-156781
| Source | ID | Title |
|---|---|---|
EUVD |
EUVD-2024-37384 | A privilege escalation vulnerability was discovered in XCC that could allow an authenticated XCC user with elevated privileges to perform command injection via specially crafted IPMI commands. |
No CVSS v4.0
No CVSS v3.0
No CVSS v2
This CVE is not in the KEV list.
Exploit prediction score: 1.0% (1.006% probability within 30 days)
Key SSVC decision points have not yet been added.
| Link | Providers |
|---|---|
| https://support.lenovo.com/us/en/product_security/LEN-156781 |
|
No history.
No data.
OpenCVE enrichment
Updated: Jul 12, 2025, 10:00 PM
EUVD