CVE Feed

    Dashboard / CVE / CVE-2024-8281

    CVE-2024-8281

    An input validation weakness was discovered in XCC that could allow a valid, authenticated XCC user with elevated privileges to perform command injection through specially crafted command line input in the XCC SSH captive shell.

    Published:Sep 13, 2024
    Last Modified:Apr 15, 2026
    EPS:Sep 13, 2024
    EPSS Score:0.00438
    CVSS Score:7.2

    Affected Products

    Vendor
    Lenovo
    Product
    Thinkagile Hx1021 Edge Certified Node 3yr Firmware
    Vendor
    Lenovo
    Product
    Thinkagile Hx1320 Firmware
    Vendor
    Lenovo
    Product
    Thinkagile Hx1321 Firmware
    Vendor
    Lenovo
    Product
    Thinkagile Hx1331 Firmware
    Vendor
    Lenovo
    Product
    Thinkagile Hx1520-r Firmware
    Vendor
    Lenovo
    Product
    Thinkagile Hx1521-r Firmware
    Vendor
    Lenovo
    Product
    Thinkagile Hx2320-e Firmware
    Vendor
    Lenovo
    Product
    Thinkagile Hx2321 Firmware
    Vendor
    Lenovo
    Product
    Thinkagile Hx2330 Firmware
    Vendor
    Lenovo
    Product
    Thinkagile Hx2331 Firmware
    Vendor
    Lenovo
    Product
    Thinkagile Hx2720-e Firmware
    Vendor
    Lenovo
    Product
    Thinkagile Hx3320 Firmware
    Vendor
    Lenovo
    Product
    Thinkagile Hx3321 Firmware
    Vendor
    Lenovo
    Product
    Thinkagile Hx3330 Firmware
    Vendor
    Lenovo
    Product
    Thinkagile Hx3331 Firmware
    Vendor
    Lenovo
    Product
    Thinkagile Hx3331 Node Sap Hana
    Vendor
    Lenovo
    Product
    Thinkagile Hx3375 Firmware
    Vendor
    Lenovo
    Product
    Thinkagile Hx3376 Firmware
    Vendor
    Lenovo
    Product
    Thinkagile Hx3520-g Firmware
    Vendor
    Lenovo
    Product
    Thinkagile Hx3521-g Firmware
    Vendor
    Lenovo
    Product
    Thinkagile Hx3720 Firmware
    Vendor
    Lenovo
    Product
    Thinkagile Hx3721 Firmware
    Vendor
    Lenovo
    Product
    Thinkagile Hx5520-c Firmware
    Vendor
    Lenovo
    Product
    Thinkagile Hx5520 Firmware
    Vendor
    Lenovo
    Product
    Thinkagile Hx5521-c Firmware
    Vendor
    Lenovo
    Product
    Thinkagile Hx5521 Firmware
    Vendor
    Lenovo
    Product
    Thinkagile Hx5530 Firmware
    Vendor
    Lenovo
    Product
    Thinkagile Hx5531 Firmware
    Vendor
    Lenovo
    Product
    Thinkagile Hx7520 Firmware
    Vendor
    Lenovo
    Product
    Thinkagile Hx7521 Firmware
    Vendor
    Lenovo
    Product
    Thinkagile Hx7530 Appl For Sap Hana
    Vendor
    Lenovo
    Product
    Thinkagile Hx7530 Firmware
    Vendor
    Lenovo
    Product
    Thinkagile Hx7531 Firmware
    Vendor
    Lenovo
    Product
    Thinkagile Hx7531 Node Sap Hana
    Vendor
    Lenovo
    Product
    Thinkagile Hx7820 Firmware
    Vendor
    Lenovo
    Product
    Thinkagile Hx7821 Firmware
    Vendor
    Lenovo
    Product
    Thinkagile Hx Enclosure Certified Node Firmware
    Vendor
    Lenovo
    Product
    Thinkagile Mx1021 On Se350 Firmware
    Vendor
    Lenovo
    Product
    Thinkagile Mx3330-f All-flash Firmware
    Vendor
    Lenovo
    Product
    Thinkagile Mx3330-h Hybrid Firmware
    Vendor
    Lenovo
    Product
    Thinkagile Mx3331-f All-flash Firmware
    Vendor
    Lenovo
    Product
    Thinkagile Mx3331-h Hybrid Firmware
    Vendor
    Lenovo
    Product
    Thinkagile Mx3530-h Hybrid Firmware
    Vendor
    Lenovo
    Product
    Thinkagile Mx3530 F All Flash Firmware
    Vendor
    Lenovo
    Product
    Thinkagile Mx3531-f All-flash Firmware
    Vendor
    Lenovo
    Product
    Thinkagile Mx3531 H Hybrid Firmware
    Vendor
    Lenovo
    Product
    Thinkagile Mx Edge- Mx1020 Firmware
    Vendor
    Lenovo
    Product
    Thinkagile Vx1320 Firmware
    Vendor
    Lenovo
    Product
    Thinkagile Vx2320 Firmware
    Vendor
    Lenovo
    Product
    Thinkagile Vx2330 Firmware
    Vendor
    Lenovo
    Product
    Thinkagile Vx3320 Firmware
    Vendor
    Lenovo
    Product
    Thinkagile Vx3330 Firmware
    Vendor
    Lenovo
    Product
    Thinkagile Vx3331 Firmware
    Vendor
    Lenovo
    Product
    Thinkagile Vx3520-g Firmware
    Vendor
    Lenovo
    Product
    Thinkagile Vx3530-g Firmware
    Vendor
    Lenovo
    Product
    Thinkagile Vx3720 Firmware
    Vendor
    Lenovo
    Product
    Thinkagile Vx5520 Firmware
    Vendor
    Lenovo
    Product
    Thinkagile Vx5530 Firmware
    Vendor
    Lenovo
    Product
    Thinkagile Vx635 V3 Firmware
    Vendor
    Lenovo
    Product
    Thinkagile Vx645 V3 Certified Node Firmware
    Vendor
    Lenovo
    Product
    Thinkagile Vx645 V3 Firmware
    Vendor
    Lenovo
    Product
    Thinkagile Vx655 V3 Certified Node Firmware
    Vendor
    Lenovo
    Product
    Thinkagile Vx655 V3 Firmware
    Vendor
    Lenovo
    Product
    Thinkagile Vx665 V3 Certified Node Firmware
    Vendor
    Lenovo
    Product
    Thinkagile Vx665 V3 Firmware
    Vendor
    Lenovo
    Product
    Thinkagile Vx7320 N Firmware
    Vendor
    Lenovo
    Product
    Thinkagile Vx7330 Firmware
    Vendor
    Lenovo
    Product
    Thinkagile Vx7520 Firmware
    Vendor
    Lenovo
    Product
    Thinkagile Vx7520 N Firmware
    Vendor
    Lenovo
    Product
    Thinkagile Vx7530 Firmware
    Vendor
    Lenovo
    Product
    Thinkagile Vx7531 Firmware
    Vendor
    Lenovo
    Product
    Thinkagile Vx7820 Firmware
    Vendor
    Lenovo
    Product
    Thinkagile Vx 1se Certified Node Firmware
    Vendor
    Lenovo
    Product
    Thinkagile Vx 2u4n Firmware
    Vendor
    Lenovo
    Product
    Thinkagile Vx 4u Firmware
    Vendor
    Lenovo
    Product
    Thinkedge Se350 V2 Firmware
    Vendor
    Lenovo
    Product
    Thinkedge Se360 V2 Firmware
    Vendor
    Lenovo
    Product
    Thinkedge Se450 Firmware
    Vendor
    Lenovo
    Product
    Thinkedge Se455 V3 Firmware
    Vendor
    Lenovo
    Product
    Thinkstation P920 Workstation Firmware
    Vendor
    Lenovo
    Product
    Thinksystem Sd530 Firmware
    Vendor
    Lenovo
    Product
    Thinksystem Sd530 V3 Firmware
    Vendor
    Lenovo
    Product
    Thinksystem Sd550 V3 Firmware
    Vendor
    Lenovo
    Product
    Thinksystem Sd630 V2 Firmware
    Vendor
    Lenovo
    Product
    Thinksystem Sd650-n V2 Firmware
    Vendor
    Lenovo
    Product
    Thinksystem Sd650 Dwc Dual Node Tray Firmware
    Vendor
    Lenovo
    Product
    Thinksystem Sd650 V2 Firmware
    Vendor
    Lenovo
    Product
    Thinksystem Sd650 V3 Firmware
    Vendor
    Lenovo
    Product
    Thinksystem Se350 Firmware
    Vendor
    Lenovo
    Product
    Thinksystem Sn550 Firmware
    Vendor
    Lenovo
    Product
    Thinksystem Sn550 V2 Firmware
    Vendor
    Lenovo
    Product
    Thinksystem Sn850 Firmware
    Vendor
    Lenovo
    Product
    Thinksystem Sr150 Firmware
    Vendor
    Lenovo
    Product
    Thinksystem Sr158 Firmware
    Vendor
    Lenovo
    Product
    Thinksystem Sr250 Firmware
    Vendor
    Lenovo
    Product
    Thinksystem Sr250 V2 Firmware
    Vendor
    Lenovo
    Product
    Thinksystem Sr250 V3 Firmware
    Vendor
    Lenovo
    Product
    Thinksystem Sr258 Firmware
    Vendor
    Lenovo
    Product
    Thinksystem Sr258 V2 Firmware
    Vendor
    Lenovo
    Product
    Thinksystem Sr258 V3 Firmware
    Vendor
    Lenovo
    Product
    Thinksystem Sr530 Firmware
    Vendor
    Lenovo
    Product
    Thinksystem Sr550 Firmware
    Vendor
    Lenovo
    Product
    Thinksystem Sr570 Firmware
    Vendor
    Lenovo
    Product
    Thinksystem Sr590 Firmware
    Vendor
    Lenovo
    Product
    Thinksystem Sr630 Firmware
    Vendor
    Lenovo
    Product
    Thinksystem Sr630 V2 Firmware
    Vendor
    Lenovo
    Product
    Thinksystem Sr630 V3 Firmware
    Vendor
    Lenovo
    Product
    Thinksystem Sr635 V3 Firmware
    Vendor
    Lenovo
    Product
    Thinksystem Sr645 Firmware
    Vendor
    Lenovo
    Product
    Thinksystem Sr645 V3 Firmware
    Vendor
    Lenovo
    Product
    Thinksystem Sr650 Firmware
    Vendor
    Lenovo
    Product
    Thinksystem Sr650 V2 Firmware
    Vendor
    Lenovo
    Product
    Thinksystem Sr650 V3 Firmware
    Vendor
    Lenovo
    Product
    Thinksystem Sr655 V3 Firmware
    Vendor
    Lenovo
    Product
    Thinksystem Sr665 Firmware
    Vendor
    Lenovo
    Product
    Thinksystem Sr665 V3 Firmware
    Vendor
    Lenovo
    Product
    Thinksystem Sr670 Firmware
    Vendor
    Lenovo
    Product
    Thinksystem Sr670 V2 Firmware
    Vendor
    Lenovo
    Product
    Thinksystem Sr675 V3 Firmware
    Vendor
    Lenovo
    Product
    Thinksystem Sr850 Firmware
    Vendor
    Lenovo
    Product
    Thinksystem Sr850 V2 Firmware
    Vendor
    Lenovo
    Product
    Thinksystem Sr850 V3 Firmware
    Vendor
    Lenovo
    Product
    Thinksystem Sr850p Firmware
    Vendor
    Lenovo
    Product
    Thinksystem Sr860 Firmware
    Vendor
    Lenovo
    Product
    Thinksystem Sr860 V2 Firmware
    Vendor
    Lenovo
    Product
    Thinksystem Sr860 V3 Firmware
    Vendor
    Lenovo
    Product
    Thinksystem Sr950 Firmware
    Vendor
    Lenovo
    Product
    Thinksystem Sr950 V3 Firmware
    Vendor
    Lenovo
    Product
    Thinksystem St250 Firmware
    Vendor
    Lenovo
    Product
    Thinksystem St250 V2 Firmware
    Vendor
    Lenovo
    Product
    Thinksystem St250 V3 Firmware
    Vendor
    Lenovo
    Product
    Thinksystem St258 Firmware
    Vendor
    Lenovo
    Product
    Thinksystem St258 V2 Firmware
    Vendor
    Lenovo
    Product
    Thinksystem St258 V3 Firmware
    Vendor
    Lenovo
    Product
    Thinksystem St550 Firmware
    Vendor
    Lenovo
    Product
    Thinksystem St650 V2 Firmware
    Vendor
    Lenovo
    Product
    Thinksystem St650 V3 Firmware
    Vendor
    Lenovo
    Product
    Thinksystem St658 V2 Firmware
    Vendor
    Lenovo
    Product
    Thinksystem St658 V3 Firmware

    Exploits

    No exploit reference

    Common Vulnerability Scoring System

    Attack Vector
    Network
    Adjacent
    Local
    Physical
    Privileges Required
    None
    Low
    High
    User Interaction
    None
    Required
    Scope
    Unchanged
    Changed
    Confidentiality
    None
    Low
    High
    Integrity
    None
    Low
    High
    Availability
    None
    Low
    High