CVE Feed

    Dashboard / CVE / CVE-2023-4607

    CVE-2023-4607

    An authenticated XCC user can change permissions for any user through a crafted API command.

    Published:Oct 24, 2023
    Last Modified:Dec 3, 2024
    EPS:Oct 24, 2023
    EPSS Score:0.00163
    CVSS Score:7.5

    Affected Products

    Vendor
    Lenovo
    Product
    Thinkagile Hx1021 Edg
    Vendor
    Lenovo
    Product
    Thinkagile Hx1021 Edg Firmware
    Vendor
    Lenovo
    Product
    Thinkagile Hx1320
    Vendor
    Lenovo
    Product
    Thinkagile Hx1320 Firmware
    Vendor
    Lenovo
    Product
    Thinkagile Hx1321
    Vendor
    Lenovo
    Product
    Thinkagile Hx1321 Firmware
    Vendor
    Lenovo
    Product
    Thinkagile Hx1331
    Vendor
    Lenovo
    Product
    Thinkagile Hx1331 Firmware
    Vendor
    Lenovo
    Product
    Thinkagile Hx1520-r
    Vendor
    Lenovo
    Product
    Thinkagile Hx1520-r Firmware
    Vendor
    Lenovo
    Product
    Thinkagile Hx1521-r
    Vendor
    Lenovo
    Product
    Thinkagile Hx1521-r Firmware
    Vendor
    Lenovo
    Product
    Thinkagile Hx2320-e
    Vendor
    Lenovo
    Product
    Thinkagile Hx2320-e Firmware
    Vendor
    Lenovo
    Product
    Thinkagile Hx2321
    Vendor
    Lenovo
    Product
    Thinkagile Hx2321 Firmware
    Vendor
    Lenovo
    Product
    Thinkagile Hx2330
    Vendor
    Lenovo
    Product
    Thinkagile Hx2330 Firmware
    Vendor
    Lenovo
    Product
    Thinkagile Hx2331
    Vendor
    Lenovo
    Product
    Thinkagile Hx2331 Firmware
    Vendor
    Lenovo
    Product
    Thinkagile Hx2720-e
    Vendor
    Lenovo
    Product
    Thinkagile Hx2720-e Firmware
    Vendor
    Lenovo
    Product
    Thinkagile Hx3320
    Vendor
    Lenovo
    Product
    Thinkagile Hx3320 Firmware
    Vendor
    Lenovo
    Product
    Thinkagile Hx3321
    Vendor
    Lenovo
    Product
    Thinkagile Hx3321 Firmware
    Vendor
    Lenovo
    Product
    Thinkagile Hx3330
    Vendor
    Lenovo
    Product
    Thinkagile Hx3330 Firmware
    Vendor
    Lenovo
    Product
    Thinkagile Hx3331
    Vendor
    Lenovo
    Product
    Thinkagile Hx3331 Firmware
    Vendor
    Lenovo
    Product
    Thinkagile Hx3375
    Vendor
    Lenovo
    Product
    Thinkagile Hx3375 Firmware
    Vendor
    Lenovo
    Product
    Thinkagile Hx3376
    Vendor
    Lenovo
    Product
    Thinkagile Hx3376 Firmware
    Vendor
    Lenovo
    Product
    Thinkagile Hx3520-g
    Vendor
    Lenovo
    Product
    Thinkagile Hx3520-g Firmware
    Vendor
    Lenovo
    Product
    Thinkagile Hx3521-g
    Vendor
    Lenovo
    Product
    Thinkagile Hx3521-g Firmware
    Vendor
    Lenovo
    Product
    Thinkagile Hx3720
    Vendor
    Lenovo
    Product
    Thinkagile Hx3720 Firmware
    Vendor
    Lenovo
    Product
    Thinkagile Hx3721
    Vendor
    Lenovo
    Product
    Thinkagile Hx3721 Firmware
    Vendor
    Lenovo
    Product
    Thinkagile Hx5520
    Vendor
    Lenovo
    Product
    Thinkagile Hx5520-c
    Vendor
    Lenovo
    Product
    Thinkagile Hx5520-c Firmware
    Vendor
    Lenovo
    Product
    Thinkagile Hx5520 Firmware
    Vendor
    Lenovo
    Product
    Thinkagile Hx5521
    Vendor
    Lenovo
    Product
    Thinkagile Hx5521-c
    Vendor
    Lenovo
    Product
    Thinkagile Hx5521-c Firmware
    Vendor
    Lenovo
    Product
    Thinkagile Hx5521 Firmware
    Vendor
    Lenovo
    Product
    Thinkagile Hx5530
    Vendor
    Lenovo
    Product
    Thinkagile Hx5530 Firmware
    Vendor
    Lenovo
    Product
    Thinkagile Hx5531
    Vendor
    Lenovo
    Product
    Thinkagile Hx5531 Firmware
    Vendor
    Lenovo
    Product
    Thinkagile Hx7520
    Vendor
    Lenovo
    Product
    Thinkagile Hx7520 Firmware
    Vendor
    Lenovo
    Product
    Thinkagile Hx7521
    Vendor
    Lenovo
    Product
    Thinkagile Hx7521 Firmware
    Vendor
    Lenovo
    Product
    Thinkagile Hx7530
    Vendor
    Lenovo
    Product
    Thinkagile Hx7530 Firmware
    Vendor
    Lenovo
    Product
    Thinkagile Hx7531
    Vendor
    Lenovo
    Product
    Thinkagile Hx7531 Firmware
    Vendor
    Lenovo
    Product
    Thinkagile Hx7820
    Vendor
    Lenovo
    Product
    Thinkagile Hx7820 Firmware
    Vendor
    Lenovo
    Product
    Thinkagile Hx7821
    Vendor
    Lenovo
    Product
    Thinkagile Hx7821 Firmware
    Vendor
    Lenovo
    Product
    Thinkagile Hx Enclosure
    Vendor
    Lenovo
    Product
    Thinkagile Hx Enclosure Firmware
    Vendor
    Lenovo
    Product
    Thinkagile Mx1021 On Se350
    Vendor
    Lenovo
    Product
    Thinkagile Mx1021 On Se350 Firmware
    Vendor
    Lenovo
    Product
    Thinkagile Mx3330-f All-flash
    Vendor
    Lenovo
    Product
    Thinkagile Mx3330-f All-flash Firmware
    Vendor
    Lenovo
    Product
    Thinkagile Mx3330-h Hybrid
    Vendor
    Lenovo
    Product
    Thinkagile Mx3330-h Hybrid Firmware
    Vendor
    Lenovo
    Product
    Thinkagile Mx3331-f All-flash
    Vendor
    Lenovo
    Product
    Thinkagile Mx3331-f All-flash Firmware
    Vendor
    Lenovo
    Product
    Thinkagile Mx3331-h Hybrid
    Vendor
    Lenovo
    Product
    Thinkagile Mx3331-h Hybrid Firmware
    Vendor
    Lenovo
    Product
    Thinkagile Mx3530-h Hybrid
    Vendor
    Lenovo
    Product
    Thinkagile Mx3530-h Hybrid Firmware
    Vendor
    Lenovo
    Product
    Thinkagile Mx3530 F All Flash
    Vendor
    Lenovo
    Product
    Thinkagile Mx3530 F All Flash Firmware
    Vendor
    Lenovo
    Product
    Thinkagile Mx3531-f All-flash
    Vendor
    Lenovo
    Product
    Thinkagile Mx3531-f All-flash Firmware
    Vendor
    Lenovo
    Product
    Thinkagile Mx3531 H Hybrid
    Vendor
    Lenovo
    Product
    Thinkagile Mx3531 H Hybrid Firmware
    Vendor
    Lenovo
    Product
    Thinkagile Mx630 V3 Firmware
    Vendor
    Lenovo
    Product
    Thinkagile Mx630 V3 Intergrated System Firmware
    Vendor
    Lenovo
    Product
    Thinkagile Mx650 V3 Firmware
    Vendor
    Lenovo
    Product
    Thinkagile Mx650 V3 Intergrated System Firmware
    Vendor
    Lenovo
    Product
    Thinkagile Mx Edge- Mx1020
    Vendor
    Lenovo
    Product
    Thinkagile Mx Edge- Mx1020 Firmware
    Vendor
    Lenovo
    Product
    Thinkagile Vx1320
    Vendor
    Lenovo
    Product
    Thinkagile Vx1320 Firmware
    Vendor
    Lenovo
    Product
    Thinkagile Vx2320
    Vendor
    Lenovo
    Product
    Thinkagile Vx2320 Firmware
    Vendor
    Lenovo
    Product
    Thinkagile Vx2330
    Vendor
    Lenovo
    Product
    Thinkagile Vx2330 Firmware
    Vendor
    Lenovo
    Product
    Thinkagile Vx3320
    Vendor
    Lenovo
    Product
    Thinkagile Vx3320 Firmware
    Vendor
    Lenovo
    Product
    Thinkagile Vx3330
    Vendor
    Lenovo
    Product
    Thinkagile Vx3330 Firmware
    Vendor
    Lenovo
    Product
    Thinkagile Vx3331
    Vendor
    Lenovo
    Product
    Thinkagile Vx3331 Firmware
    Vendor
    Lenovo
    Product
    Thinkagile Vx3520-g
    Vendor
    Lenovo
    Product
    Thinkagile Vx3520-g Firmware
    Vendor
    Lenovo
    Product
    Thinkagile Vx3530-g
    Vendor
    Lenovo
    Product
    Thinkagile Vx3530-g Firmware
    Vendor
    Lenovo
    Product
    Thinkagile Vx3720
    Vendor
    Lenovo
    Product
    Thinkagile Vx3720 Firmware
    Vendor
    Lenovo
    Product
    Thinkagile Vx5520
    Vendor
    Lenovo
    Product
    Thinkagile Vx5520 Firmware
    Vendor
    Lenovo
    Product
    Thinkagile Vx5530
    Vendor
    Lenovo
    Product
    Thinkagile Vx5530 Firmware
    Vendor
    Lenovo
    Product
    Thinkagile Vx7320 N
    Vendor
    Lenovo
    Product
    Thinkagile Vx7320 N Firmware
    Vendor
    Lenovo
    Product
    Thinkagile Vx7330
    Vendor
    Lenovo
    Product
    Thinkagile Vx7330 Firmware
    Vendor
    Lenovo
    Product
    Thinkagile Vx7520
    Vendor
    Lenovo
    Product
    Thinkagile Vx7520 Firmware
    Vendor
    Lenovo
    Product
    Thinkagile Vx7520 N
    Vendor
    Lenovo
    Product
    Thinkagile Vx7520 N Firmware
    Vendor
    Lenovo
    Product
    Thinkagile Vx7530
    Vendor
    Lenovo
    Product
    Thinkagile Vx7530 Firmware
    Vendor
    Lenovo
    Product
    Thinkagile Vx7531
    Vendor
    Lenovo
    Product
    Thinkagile Vx7531 Firmware
    Vendor
    Lenovo
    Product
    Thinkagile Vx7820
    Vendor
    Lenovo
    Product
    Thinkagile Vx7820 Firmware
    Vendor
    Lenovo
    Product
    Thinkagile Vx 1se
    Vendor
    Lenovo
    Product
    Thinkagile Vx 1se Firmware
    Vendor
    Lenovo
    Product
    Thinkagile Vx 2u4n
    Vendor
    Lenovo
    Product
    Thinkagile Vx 2u4n Firmware
    Vendor
    Lenovo
    Product
    Thinkagile Vx 4u
    Vendor
    Lenovo
    Product
    Thinkagile Vx 4u Firmware
    Vendor
    Lenovo
    Product
    Thinkedge Se450
    Vendor
    Lenovo
    Product
    Thinkedge Se450 Firmware
    Vendor
    Lenovo
    Product
    Thinkserver Sr590
    Vendor
    Lenovo
    Product
    Thinksystem Sd530
    Vendor
    Lenovo
    Product
    Thinksystem Sd530 Firmware
    Vendor
    Lenovo
    Product
    Thinksystem Sd630 V2
    Vendor
    Lenovo
    Product
    Thinksystem Sd630 V2 Firmware
    Vendor
    Lenovo
    Product
    Thinksystem Sd650-n V2
    Vendor
    Lenovo
    Product
    Thinksystem Sd650-n V2 Firmware
    Vendor
    Lenovo
    Product
    Thinksystem Sd650 Dual Node Tray
    Vendor
    Lenovo
    Product
    Thinksystem Sd650 Dual Node Tray Firmware
    Vendor
    Lenovo
    Product
    Thinksystem Sd650 Dwc Dual Node Tray
    Vendor
    Lenovo
    Product
    Thinksystem Sd650 Dwc Dual Node Tray Firmware
    Vendor
    Lenovo
    Product
    Thinksystem Sd650 V2
    Vendor
    Lenovo
    Product
    Thinksystem Sd650 V2 Firmware
    Vendor
    Lenovo
    Product
    Thinksystem Sd650 V3 Firmware
    Vendor
    Lenovo
    Product
    Thinksystem Sd665 V3 Firmware
    Vendor
    Lenovo
    Product
    Thinksystem Se350
    Vendor
    Lenovo
    Product
    Thinksystem Se350 Firmware
    Vendor
    Lenovo
    Product
    Thinksystem Sn550
    Vendor
    Lenovo
    Product
    Thinksystem Sn550 Firmware
    Vendor
    Lenovo
    Product
    Thinksystem Sn550 V2
    Vendor
    Lenovo
    Product
    Thinksystem Sn550 V2 Firmware
    Vendor
    Lenovo
    Product
    Thinksystem Sn850
    Vendor
    Lenovo
    Product
    Thinksystem Sn850 Firmware
    Vendor
    Lenovo
    Product
    Thinksystem Sr150
    Vendor
    Lenovo
    Product
    Thinksystem Sr150 Firmware
    Vendor
    Lenovo
    Product
    Thinksystem Sr158
    Vendor
    Lenovo
    Product
    Thinksystem Sr158 Firmware
    Vendor
    Lenovo
    Product
    Thinksystem Sr250
    Vendor
    Lenovo
    Product
    Thinksystem Sr250 Firmware
    Vendor
    Lenovo
    Product
    Thinksystem Sr250 V2
    Vendor
    Lenovo
    Product
    Thinksystem Sr258
    Vendor
    Lenovo
    Product
    Thinksystem Sr258 Firmware
    Vendor
    Lenovo
    Product
    Thinksystem Sr258 V2
    Vendor
    Lenovo
    Product
    Thinksystem Sr258 V2 Firmware
    Vendor
    Lenovo
    Product
    Thinksystem Sr530
    Vendor
    Lenovo
    Product
    Thinksystem Sr530 Firmware
    Vendor
    Lenovo
    Product
    Thinksystem Sr550
    Vendor
    Lenovo
    Product
    Thinksystem Sr550 Firmware
    Vendor
    Lenovo
    Product
    Thinksystem Sr570
    Vendor
    Lenovo
    Product
    Thinksystem Sr570 Firmware
    Vendor
    Lenovo
    Product
    Thinksystem Sr590 Firmware
    Vendor
    Lenovo
    Product
    Thinksystem Sr630
    Vendor
    Lenovo
    Product
    Thinksystem Sr630 Firmware
    Vendor
    Lenovo
    Product
    Thinksystem Sr630 V2
    Vendor
    Lenovo
    Product
    Thinksystem Sr630 V2 Firmware
    Vendor
    Lenovo
    Product
    Thinksystem Sr630 V3 Firmware
    Vendor
    Lenovo
    Product
    Thinksystem Sr635 V3 Firmware
    Vendor
    Lenovo
    Product
    Thinksystem Sr645
    Vendor
    Lenovo
    Product
    Thinksystem Sr645 Firmware
    Vendor
    Lenovo
    Product
    Thinksystem Sr645 V3
    Vendor
    Lenovo
    Product
    Thinksystem Sr645 V3 Firmware
    Vendor
    Lenovo
    Product
    Thinksystem Sr650
    Vendor
    Lenovo
    Product
    Thinksystem Sr650 Firmware
    Vendor
    Lenovo
    Product
    Thinksystem Sr650 V2
    Vendor
    Lenovo
    Product
    Thinksystem Sr650 V2 Firmware
    Vendor
    Lenovo
    Product
    Thinksystem Sr650 V3 Firmware
    Vendor
    Lenovo
    Product
    Thinksystem Sr655 V3 Firmware
    Vendor
    Lenovo
    Product
    Thinksystem Sr665
    Vendor
    Lenovo
    Product
    Thinksystem Sr665 Firmware
    Vendor
    Lenovo
    Product
    Thinksystem Sr665 V3 Firmware
    Vendor
    Lenovo
    Product
    Thinksystem Sr670
    Vendor
    Lenovo
    Product
    Thinksystem Sr670 Firmware
    Vendor
    Lenovo
    Product
    Thinksystem Sr670 V2
    Vendor
    Lenovo
    Product
    Thinksystem Sr670 V2 Firmware
    Vendor
    Lenovo
    Product
    Thinksystem Sr675 V3 Firmware
    Vendor
    Lenovo
    Product
    Thinksystem Sr850
    Vendor
    Lenovo
    Product
    Thinksystem Sr850 Firmware
    Vendor
    Lenovo
    Product
    Thinksystem Sr850 V2
    Vendor
    Lenovo
    Product
    Thinksystem Sr850 V2 Firmware
    Vendor
    Lenovo
    Product
    Thinksystem Sr850 V3 Firmware
    Vendor
    Lenovo
    Product
    Thinksystem Sr850p
    Vendor
    Lenovo
    Product
    Thinksystem Sr850p Firmware
    Vendor
    Lenovo
    Product
    Thinksystem Sr860
    Vendor
    Lenovo
    Product
    Thinksystem Sr860 Firmware
    Vendor
    Lenovo
    Product
    Thinksystem Sr860 V2
    Vendor
    Lenovo
    Product
    Thinksystem Sr860 V2 Firmware
    Vendor
    Lenovo
    Product
    Thinksystem Sr860 V3 Firmware
    Vendor
    Lenovo
    Product
    Thinksystem Sr950
    Vendor
    Lenovo
    Product
    Thinksystem Sr950 Firmware
    Vendor
    Lenovo
    Product
    Thinksystem St250
    Vendor
    Lenovo
    Product
    Thinksystem St250 Firmware
    Vendor
    Lenovo
    Product
    Thinksystem St250 V2
    Vendor
    Lenovo
    Product
    Thinksystem St250 V2 Firmware
    Vendor
    Lenovo
    Product
    Thinksystem St258
    Vendor
    Lenovo
    Product
    Thinksystem St258 Firmware
    Vendor
    Lenovo
    Product
    Thinksystem St258 V2
    Vendor
    Lenovo
    Product
    Thinksystem St258 V2 Firmware
    Vendor
    Lenovo
    Product
    Thinksystem St550
    Vendor
    Lenovo
    Product
    Thinksystem St550 Firmware
    Vendor
    Lenovo
    Product
    Thinksystem St650 V2
    Vendor
    Lenovo
    Product
    Thinksystem St650 V2 Firmware
    Vendor
    Lenovo
    Product
    Thinksystem St650 V3 Firmware
    Vendor
    Lenovo
    Product
    Thinksystem St658 V2
    Vendor
    Lenovo
    Product
    Thinksystem St658 V2 Firmware
    Vendor
    Lenovo
    Product
    Thinksystem St658 V3 Firmware

    Exploits

    No exploit reference

    Common Weakness Enumeration

    CWE-269 Improper Privilege Management

    Common Vulnerability Scoring System

    Attack Vector
    Network
    Adjacent
    Local
    Physical
    Privileges Required
    None
    Low
    High
    User Interaction
    None
    Required
    Scope
    Unchanged
    Changed
    Confidentiality
    None
    Low
    High
    Integrity
    None
    Low
    High
    Availability
    None
    Low
    High