CVE Feed

    Dashboard / CVE / CVE-2023-4606

    CVE-2023-4606

    An authenticated XCC user with Read-Only permission can change a different user’s password through a crafted API command.   This affects ThinkSystem v2 and v3 servers with XCC; ThinkSystem v1 servers are not affected.

    Published:Oct 24, 2023
    Last Modified:Nov 21, 2024
    EPS:Oct 24, 2023
    EPSS Score:0.00117
    CVSS Score:8.1

    Affected Products

    Vendor
    Lenovo
    Product
    Thinkagile Hx1331
    Vendor
    Lenovo
    Product
    Thinkagile Hx1331 Firmware
    Vendor
    Lenovo
    Product
    Thinkagile Hx2330
    Vendor
    Lenovo
    Product
    Thinkagile Hx2330 Firmware
    Vendor
    Lenovo
    Product
    Thinkagile Hx2331
    Vendor
    Lenovo
    Product
    Thinkagile Hx2331 Firmware
    Vendor
    Lenovo
    Product
    Thinkagile Hx3330
    Vendor
    Lenovo
    Product
    Thinkagile Hx3330 Firmware
    Vendor
    Lenovo
    Product
    Thinkagile Hx3331
    Vendor
    Lenovo
    Product
    Thinkagile Hx3331 Firmware
    Vendor
    Lenovo
    Product
    Thinkagile Hx3375
    Vendor
    Lenovo
    Product
    Thinkagile Hx3375 Firmware
    Vendor
    Lenovo
    Product
    Thinkagile Hx3376
    Vendor
    Lenovo
    Product
    Thinkagile Hx3376 Firmware
    Vendor
    Lenovo
    Product
    Thinkagile Hx5530
    Vendor
    Lenovo
    Product
    Thinkagile Hx5530 Firmware
    Vendor
    Lenovo
    Product
    Thinkagile Hx5531
    Vendor
    Lenovo
    Product
    Thinkagile Hx5531 Firmware
    Vendor
    Lenovo
    Product
    Thinkagile Hx7530
    Vendor
    Lenovo
    Product
    Thinkagile Hx7530 Firmware
    Vendor
    Lenovo
    Product
    Thinkagile Hx7531
    Vendor
    Lenovo
    Product
    Thinkagile Hx7531 Firmware
    Vendor
    Lenovo
    Product
    Thinkagile Mx3330-f All-flash
    Vendor
    Lenovo
    Product
    Thinkagile Mx3330-f All-flash Firmware
    Vendor
    Lenovo
    Product
    Thinkagile Mx3330-h Hybrid
    Vendor
    Lenovo
    Product
    Thinkagile Mx3330-h Hybrid Firmware
    Vendor
    Lenovo
    Product
    Thinkagile Mx3331-f All-flash
    Vendor
    Lenovo
    Product
    Thinkagile Mx3331-f All-flash Firmware
    Vendor
    Lenovo
    Product
    Thinkagile Mx3331-h Hybrid
    Vendor
    Lenovo
    Product
    Thinkagile Mx3331-h Hybrid Firmware
    Vendor
    Lenovo
    Product
    Thinkagile Mx3530-h Hybrid
    Vendor
    Lenovo
    Product
    Thinkagile Mx3530-h Hybrid Firmware
    Vendor
    Lenovo
    Product
    Thinkagile Mx3530 F All Flash
    Vendor
    Lenovo
    Product
    Thinkagile Mx3530 F All Flash Firmware
    Vendor
    Lenovo
    Product
    Thinkagile Mx3531-f All-flash
    Vendor
    Lenovo
    Product
    Thinkagile Mx3531-f All-flash Firmware
    Vendor
    Lenovo
    Product
    Thinkagile Mx3531 H Hybrid
    Vendor
    Lenovo
    Product
    Thinkagile Mx3531 H Hybrid Firmware
    Vendor
    Lenovo
    Product
    Thinkagile Vx2330
    Vendor
    Lenovo
    Product
    Thinkagile Vx2330 Firmware
    Vendor
    Lenovo
    Product
    Thinkagile Vx3330
    Vendor
    Lenovo
    Product
    Thinkagile Vx3330 Firmware
    Vendor
    Lenovo
    Product
    Thinkagile Vx3331
    Vendor
    Lenovo
    Product
    Thinkagile Vx3331 Firmware
    Vendor
    Lenovo
    Product
    Thinkagile Vx3530-g
    Vendor
    Lenovo
    Product
    Thinkagile Vx3530-g Firmware
    Vendor
    Lenovo
    Product
    Thinkagile Vx5530
    Vendor
    Lenovo
    Product
    Thinkagile Vx5530 Firmware
    Vendor
    Lenovo
    Product
    Thinkagile Vx7330
    Vendor
    Lenovo
    Product
    Thinkagile Vx7330 Firmware
    Vendor
    Lenovo
    Product
    Thinkagile Vx7530
    Vendor
    Lenovo
    Product
    Thinkagile Vx7530 Firmware
    Vendor
    Lenovo
    Product
    Thinkagile Vx7531
    Vendor
    Lenovo
    Product
    Thinkagile Vx7531 Firmware
    Vendor
    Lenovo
    Product
    Thinksystem Sd630 V2
    Vendor
    Lenovo
    Product
    Thinksystem Sd630 V2 Firmware
    Vendor
    Lenovo
    Product
    Thinksystem Sd650-n V2
    Vendor
    Lenovo
    Product
    Thinksystem Sd650-n V2 Firmware
    Vendor
    Lenovo
    Product
    Thinksystem Sd650 V2
    Vendor
    Lenovo
    Product
    Thinksystem Sd650 V2 Firmware
    Vendor
    Lenovo
    Product
    Thinksystem Sd650 V3 Firmware
    Vendor
    Lenovo
    Product
    Thinksystem Sd665 V3 Firmware
    Vendor
    Lenovo
    Product
    Thinksystem Sn550 V2
    Vendor
    Lenovo
    Product
    Thinksystem Sn550 V2 Firmware
    Vendor
    Lenovo
    Product
    Thinksystem Sr250 Firmware
    Vendor
    Lenovo
    Product
    Thinksystem Sr250 V2
    Vendor
    Lenovo
    Product
    Thinksystem Sr258 V2
    Vendor
    Lenovo
    Product
    Thinksystem Sr258 V2 Firmware
    Vendor
    Lenovo
    Product
    Thinksystem Sr630 V2
    Vendor
    Lenovo
    Product
    Thinksystem Sr630 V2 Firmware
    Vendor
    Lenovo
    Product
    Thinksystem Sr630 V3 Firmware
    Vendor
    Lenovo
    Product
    Thinksystem Sr635 V3 Firmware
    Vendor
    Lenovo
    Product
    Thinksystem Sr645
    Vendor
    Lenovo
    Product
    Thinksystem Sr645 Firmware
    Vendor
    Lenovo
    Product
    Thinksystem Sr645 V3
    Vendor
    Lenovo
    Product
    Thinksystem Sr645 V3 Firmware
    Vendor
    Lenovo
    Product
    Thinksystem Sr650 V2
    Vendor
    Lenovo
    Product
    Thinksystem Sr650 V2 Firmware
    Vendor
    Lenovo
    Product
    Thinksystem Sr650 V3 Firmware
    Vendor
    Lenovo
    Product
    Thinksystem Sr655 V3 Firmware
    Vendor
    Lenovo
    Product
    Thinksystem Sr665
    Vendor
    Lenovo
    Product
    Thinksystem Sr665 Firmware
    Vendor
    Lenovo
    Product
    Thinksystem Sr665 V3 Firmware
    Vendor
    Lenovo
    Product
    Thinksystem Sr670
    Vendor
    Lenovo
    Product
    Thinksystem Sr670 Firmware
    Vendor
    Lenovo
    Product
    Thinksystem Sr670 V2
    Vendor
    Lenovo
    Product
    Thinksystem Sr670 V2 Firmware
    Vendor
    Lenovo
    Product
    Thinksystem Sr675 V3 Firmware
    Vendor
    Lenovo
    Product
    Thinksystem Sr850 V2
    Vendor
    Lenovo
    Product
    Thinksystem Sr850 V2 Firmware
    Vendor
    Lenovo
    Product
    Thinksystem Sr850 V3 Firmware
    Vendor
    Lenovo
    Product
    Thinksystem Sr860 V2
    Vendor
    Lenovo
    Product
    Thinksystem Sr860 V2 Firmware
    Vendor
    Lenovo
    Product
    Thinksystem Sr860 V3 Firmware
    Vendor
    Lenovo
    Product
    Thinksystem St250 V2
    Vendor
    Lenovo
    Product
    Thinksystem St250 V2 Firmware
    Vendor
    Lenovo
    Product
    Thinksystem St258 V2
    Vendor
    Lenovo
    Product
    Thinksystem St258 V2 Firmware
    Vendor
    Lenovo
    Product
    Thinksystem St650 V2
    Vendor
    Lenovo
    Product
    Thinksystem St650 V2 Firmware
    Vendor
    Lenovo
    Product
    Thinksystem St650 V3 Firmware
    Vendor
    Lenovo
    Product
    Thinksystem St658 V2
    Vendor
    Lenovo
    Product
    Thinksystem St658 V2 Firmware
    Vendor
    Lenovo
    Product
    Thinksystem St658 V3 Firmware

    Exploits

    No exploit reference

    Common Weakness Enumeration

    CWE-862 Missing Authorization

    Common Attack Pattern Enumeration and Classification (CAPEC)

    CAPEC-665 Exploitation of Thunderbolt Protection Flaws

    Related CVEs

    CVE-2024-2659 (CVSS 7.2) — A command injection vulnerability was identified in SMM/SMM2 and FPC that could allow an authenticated user w…
    CVE-2023-4608 (CVSS 4.1) — An authenticated XCC user with elevated privileges can perform blind SQL injection in limited cases through a …
    CVE-2023-4607 (CVSS 7.5) — An authenticated XCC user can change permissions for any user through a crafted API command.…
    CVE-2023-0683 (CVSS 8.3) — A valid, authenticated XCC user with read only access may gain elevated privileges through a specifically craf…
    CVE-2023-25492 (CVSS 6.3) — A valid, authenticated user may be able to trigger a denial of service of the XCC web user interface or other …
    CVE-2023-25495 (CVSS 4.9) — A valid, authenticated administrative user can query a web interface API to reveal the configured LDAP client …
    CVE-2023-29056 (CVSS 5.3) — A valid LDAP user, under specific conditions, will default to read-only permissions when authenticating into X…
    CVE-2023-29057 (CVSS 7.3) — A valid XCC user's local account permissions overrides their active directory permissions under specific confi…
    CVE-2023-29058 (CVSS 6.4) — A valid, authenticated XCC user with read-only permissions can modify custom user roles on other user accounts…
    CVE-2022-40137 (CVSS 6.7) — A buffer overflow in the WMI SMI Handler in some Lenovo models may allow an attacker with local access and ele…

    Common Vulnerability Scoring System

    Attack Vector
    Network
    Adjacent
    Local
    Physical
    Privileges Required
    None
    Low
    High
    User Interaction
    None
    Required
    Scope
    Unchanged
    Changed
    Confidentiality
    None
    Low
    High
    Integrity
    None
    Low
    High
    Availability
    None
    Low
    High