CVE Feed

    Dashboard / CVE / CVE-2021-3956

    CVE-2021-3956

    A read-only authentication bypass vulnerability was reported in the Third Quarter 2021 release of Lenovo XClarity Controller (XCC) firmware affecting XCC devices configured in LDAP Authentication Only Mode and using an LDAP server that supports “unauthenticated bind”, such as Microsoft Active Directory. An unauthenticated user can gain read-only access to XCC in such a configuration, thereby allowing the XCC device configuration to be viewed but not changed. XCC devices configured to use local authentication, LDAP Authentication + Authorization Mode, or LDAP servers that support only “authenticated bind” and/or “anonymous bind” are not affected.

    Published:May 18, 2022
    Last Modified:Nov 21, 2024
    EPS:May 18, 2022
    EPSS Score:0.00183
    CVSS Score:4.3

    Affected Products

    Vendor
    Lenovo
    Product
    Thinkagile Hx1320
    Vendor
    Lenovo
    Product
    Thinkagile Hx1321
    Vendor
    Lenovo
    Product
    Thinkagile Hx1520-r
    Vendor
    Lenovo
    Product
    Thinkagile Hx1521-r
    Vendor
    Lenovo
    Product
    Thinkagile Hx2320-e
    Vendor
    Lenovo
    Product
    Thinkagile Hx2321
    Vendor
    Lenovo
    Product
    Thinkagile Hx3320
    Vendor
    Lenovo
    Product
    Thinkagile Hx3321
    Vendor
    Lenovo
    Product
    Thinkagile Hx3375
    Vendor
    Lenovo
    Product
    Thinkagile Hx3376
    Vendor
    Lenovo
    Product
    Thinkagile Hx3520-g
    Vendor
    Lenovo
    Product
    Thinkagile Hx3521-g
    Vendor
    Lenovo
    Product
    Thinkagile Hx5520
    Vendor
    Lenovo
    Product
    Thinkagile Hx5520-c
    Vendor
    Lenovo
    Product
    Thinkagile Hx5521
    Vendor
    Lenovo
    Product
    Thinkagile Hx5521-c
    Vendor
    Lenovo
    Product
    Thinkagile Hx7520
    Vendor
    Lenovo
    Product
    Thinkagile Hx7521
    Vendor
    Lenovo
    Product
    Thinkagile Hx7820
    Vendor
    Lenovo
    Product
    Thinkagile Hx7821
    Vendor
    Lenovo
    Product
    Thinkagile Mx1021
    Vendor
    Lenovo
    Product
    Thinkagile Vx2320
    Vendor
    Lenovo
    Product
    Thinkagile Vx3320
    Vendor
    Lenovo
    Product
    Thinkagile Vx3520-g
    Vendor
    Lenovo
    Product
    Thinkagile Vx5520
    Vendor
    Lenovo
    Product
    Thinkagile Vx7320 N
    Vendor
    Lenovo
    Product
    Thinkagile Vx7520
    Vendor
    Lenovo
    Product
    Thinkagile Vx7520 N
    Vendor
    Lenovo
    Product
    Thinkstation P920
    Vendor
    Lenovo
    Product
    Thinksystem Sd650
    Vendor
    Lenovo
    Product
    Thinksystem Se350
    Vendor
    Lenovo
    Product
    Thinksystem Sn550
    Vendor
    Lenovo
    Product
    Thinksystem Sn850
    Vendor
    Lenovo
    Product
    Thinksystem Sr530
    Vendor
    Lenovo
    Product
    Thinksystem Sr550
    Vendor
    Lenovo
    Product
    Thinksystem Sr570
    Vendor
    Lenovo
    Product
    Thinksystem Sr590
    Vendor
    Lenovo
    Product
    Thinksystem Sr630
    Vendor
    Lenovo
    Product
    Thinksystem Sr645
    Vendor
    Lenovo
    Product
    Thinksystem Sr650
    Vendor
    Lenovo
    Product
    Thinksystem Sr665
    Vendor
    Lenovo
    Product
    Thinksystem Sr850
    Vendor
    Lenovo
    Product
    Thinksystem Sr860
    Vendor
    Lenovo
    Product
    Thinksystem Sr950
    Vendor
    Lenovo
    Product
    Thinksystem St550
    Vendor
    Lenovo
    Product
    Xclarity Controller

    Exploits

    No exploit reference

    Common Weakness Enumeration

    CWE-863 Incorrect Authorization

    Common Attack Pattern Enumeration and Classification (CAPEC)

    No CAPEC recorded yet

    Related CVEs

    CVE-2023-4607 (CVSS 7.5) — An authenticated XCC user can change permissions for any user through a crafted API command.…
    CVE-2023-0683 (CVSS 8.3) — A valid, authenticated XCC user with read only access may gain elevated privileges through a specifically craf…
    CVE-2023-25492 (CVSS 6.3) — A valid, authenticated user may be able to trigger a denial of service of the XCC web user interface or other …
    CVE-2023-25495 (CVSS 4.9) — A valid, authenticated administrative user can query a web interface API to reveal the configured LDAP client …
    CVE-2023-29056 (CVSS 5.3) — A valid LDAP user, under specific conditions, will default to read-only permissions when authenticating into X…
    CVE-2023-29057 (CVSS 7.3) — A valid XCC user's local account permissions overrides their active directory permissions under specific confi…
    CVE-2023-29058 (CVSS 6.4) — A valid, authenticated XCC user with read-only permissions can modify custom user roles on other user accounts…
    CVE-2022-34888 (CVSS 2.7) — The Remote Mount feature can potentially be abused by valid, authenticated users to make connections to intern…
    CVE-2022-34884 (CVSS 7.2) — A buffer overflow exists in the Remote Presence subsystem which can potentially allow valid, authenticated use…
    CVE-2022-40137 (CVSS 6.7) — A buffer overflow in the WMI SMI Handler in some Lenovo models may allow an attacker with local access and ele…

    Common Vulnerability Scoring System

    Attack Vector
    Network
    Adjacent
    Local
    Physical
    Privileges Required
    None
    Low
    High
    User Interaction
    None
    Required
    Scope
    Unchanged
    Changed
    Confidentiality
    None
    Low
    High
    Integrity
    None
    Low
    High
    Availability
    None
    Low
    High