CVEDB API

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2023-4606

An authenticated XCC user with Read-Only permission can change a different user’s password through a crafted API command. This affects ThinkSystem v2 and v3 servers with XCC; ThinkSystem v1 servers are not affected.

Exploit prediction scoring system (EPSS) score

EPSS Score 0.001

EPSS Ranking 31.9%

CVSS Severity

CVSS v3 Score 8.1

References

Products affected by CVE-2023-4606

Lenovo » Thinkagile Hx1331 » Version: N/A

cpe:2.3:h:lenovo:thinkagile_hx1331:-
Lenovo » Thinkagile Hx2330 » Version: N/A

cpe:2.3:h:lenovo:thinkagile_hx2330:-
Lenovo » Thinkagile Hx2331 » Version: N/A

cpe:2.3:h:lenovo:thinkagile_hx2331:-
Lenovo » Thinkagile Hx3330 » Version: N/A

cpe:2.3:h:lenovo:thinkagile_hx3330:-
Lenovo » Thinkagile Hx3331 » Version: N/A

cpe:2.3:h:lenovo:thinkagile_hx3331:-
Lenovo » Thinkagile Hx3375 » Version: N/A

cpe:2.3:h:lenovo:thinkagile_hx3375:-
Lenovo » Thinkagile Hx3376 » Version: N/A

cpe:2.3:h:lenovo:thinkagile_hx3376:-
Lenovo » Thinkagile Hx5530 » Version: N/A

cpe:2.3:h:lenovo:thinkagile_hx5530:-
Lenovo » Thinkagile Hx5531 » Version: N/A

cpe:2.3:h:lenovo:thinkagile_hx5531:-
Lenovo » Thinkagile Hx7530 » Version: N/A

cpe:2.3:h:lenovo:thinkagile_hx7530:-
Lenovo » Thinkagile Hx7531 » Version: N/A

cpe:2.3:h:lenovo:thinkagile_hx7531:-
Lenovo » Thinkagile Mx3330-F All-Flash » Version: N/A

cpe:2.3:h:lenovo:thinkagile_mx3330-f_all-flash:-
Lenovo » Thinkagile Mx3330-H Hybrid » Version: N/A

cpe:2.3:h:lenovo:thinkagile_mx3330-h_hybrid:-
Lenovo » Thinkagile Mx3331-F All-Flash » Version: N/A

cpe:2.3:h:lenovo:thinkagile_mx3331-f_all-flash:-
Lenovo » Thinkagile Mx3331-H Hybrid » Version: N/A

cpe:2.3:h:lenovo:thinkagile_mx3331-h_hybrid:-
Lenovo » Thinkagile Mx3530-H Hybrid » Version: N/A

cpe:2.3:h:lenovo:thinkagile_mx3530-h_hybrid:-
Lenovo » Thinkagile Mx3530 F All Flash » Version: N/A

cpe:2.3:h:lenovo:thinkagile_mx3530_f_all_flash:-
Lenovo » Thinkagile Mx3531-F All-Flash » Version: N/A

cpe:2.3:h:lenovo:thinkagile_mx3531-f_all-flash:-
Lenovo » Thinkagile Mx3531 H Hybrid » Version: N/A

cpe:2.3:h:lenovo:thinkagile_mx3531_h_hybrid:-
Lenovo » Thinkagile Vx2330 » Version: N/A

cpe:2.3:h:lenovo:thinkagile_vx2330:-
Lenovo » Thinkagile Vx3330 » Version: N/A

cpe:2.3:h:lenovo:thinkagile_vx3330:-
Lenovo » Thinkagile Vx3331 » Version: N/A

cpe:2.3:h:lenovo:thinkagile_vx3331:-
Lenovo » Thinkagile Vx3530-G » Version: N/A

cpe:2.3:h:lenovo:thinkagile_vx3530-g:-
Lenovo » Thinkagile Vx5530 » Version: N/A

cpe:2.3:h:lenovo:thinkagile_vx5530:-
Lenovo » Thinkagile Vx7330 » Version: N/A

cpe:2.3:h:lenovo:thinkagile_vx7330:-
Lenovo » Thinkagile Vx7530 » Version: N/A

cpe:2.3:h:lenovo:thinkagile_vx7530:-
Lenovo » Thinkagile Vx7531 » Version: N/A

cpe:2.3:h:lenovo:thinkagile_vx7531:-
Lenovo » Thinksystem Sd630 V2 » Version: N/A

cpe:2.3:h:lenovo:thinksystem_sd630_v2:-
Lenovo » Thinksystem Sd650-N V2 » Version: N/A

cpe:2.3:h:lenovo:thinksystem_sd650-n_v2:-
Lenovo » Thinksystem Sd650 V2 » Version: N/A

cpe:2.3:h:lenovo:thinksystem_sd650_v2:-
Lenovo » Thinksystem Sn550 V2 » Version: N/A

cpe:2.3:h:lenovo:thinksystem_sn550_v2:-
Lenovo » Thinksystem Sr250 V2 » Version: N/A

cpe:2.3:h:lenovo:thinksystem_sr250_v2:-
Lenovo » Thinksystem Sr258 V2 » Version: N/A

cpe:2.3:h:lenovo:thinksystem_sr258_v2:-
Lenovo » Thinksystem Sr630 V2 » Version: N/A

cpe:2.3:h:lenovo:thinksystem_sr630_v2:-
Lenovo » Thinksystem Sr645 » Version: N/A

cpe:2.3:h:lenovo:thinksystem_sr645:-
Lenovo » Thinksystem Sr645 V3 » Version: N/A

cpe:2.3:h:lenovo:thinksystem_sr645_v3:-
Lenovo » Thinksystem Sr650 V2 » Version: N/A

cpe:2.3:h:lenovo:thinksystem_sr650_v2:-
Lenovo » Thinksystem Sr665 » Version: N/A

cpe:2.3:h:lenovo:thinksystem_sr665:-
Lenovo » Thinksystem Sr670 » Version: N/A

cpe:2.3:h:lenovo:thinksystem_sr670:-
Lenovo » Thinksystem Sr670 V2 » Version: N/A

cpe:2.3:h:lenovo:thinksystem_sr670_v2:-
Lenovo » Thinksystem Sr850 V2 » Version: N/A

cpe:2.3:h:lenovo:thinksystem_sr850_v2:-
Lenovo » Thinksystem Sr860 V2 » Version: N/A

cpe:2.3:h:lenovo:thinksystem_sr860_v2:-
Lenovo » Thinksystem St250 V2 » Version: N/A

cpe:2.3:h:lenovo:thinksystem_st250_v2:-
Lenovo » Thinksystem St258 V2 » Version: N/A

cpe:2.3:h:lenovo:thinksystem_st258_v2:-
Lenovo » Thinksystem St650 V2 » Version: N/A

cpe:2.3:h:lenovo:thinksystem_st650_v2:-
Lenovo » Thinksystem St658 V2 » Version: N/A

cpe:2.3:h:lenovo:thinksystem_st658_v2:-
Lenovo » Thinkagile Hx1331 Firmware » Version: N/A

cpe:2.3:o:lenovo:thinkagile_hx1331_firmware:-
Lenovo » Thinkagile Hx2330 Firmware » Version: N/A

cpe:2.3:o:lenovo:thinkagile_hx2330_firmware:-
Lenovo » Thinkagile Hx2331 Firmware » Version: N/A

cpe:2.3:o:lenovo:thinkagile_hx2331_firmware:-
Lenovo » Thinkagile Hx3330 Firmware » Version: N/A

cpe:2.3:o:lenovo:thinkagile_hx3330_firmware:-
Lenovo » Thinkagile Hx3331 Firmware » Version: N/A

cpe:2.3:o:lenovo:thinkagile_hx3331_firmware:-
Lenovo » Thinkagile Hx3375 Firmware » Version: N/A

cpe:2.3:o:lenovo:thinkagile_hx3375_firmware:-
Lenovo » Thinkagile Hx3376 Firmware » Version: N/A

cpe:2.3:o:lenovo:thinkagile_hx3376_firmware:-
Lenovo » Thinkagile Hx5530 Firmware » Version: N/A

cpe:2.3:o:lenovo:thinkagile_hx5530_firmware:-
Lenovo » Thinkagile Hx5531 Firmware » Version: N/A

cpe:2.3:o:lenovo:thinkagile_hx5531_firmware:-
Lenovo » Thinkagile Hx7530 Firmware » Version: N/A

cpe:2.3:o:lenovo:thinkagile_hx7530_firmware:-
Lenovo » Thinkagile Hx7531 Firmware » Version: N/A

cpe:2.3:o:lenovo:thinkagile_hx7531_firmware:-
Lenovo » Thinkagile Mx3330-F All-Flash Firmware » Version: N/A

cpe:2.3:o:lenovo:thinkagile_mx3330-f_all-flash_firmware:-
Lenovo » Thinkagile Mx3330-H Hybrid Firmware » Version: N/A

cpe:2.3:o:lenovo:thinkagile_mx3330-h_hybrid_firmware:-
Lenovo » Thinkagile Mx3331-F All-Flash Firmware » Version: N/A

cpe:2.3:o:lenovo:thinkagile_mx3331-f_all-flash_firmware:-
Lenovo » Thinkagile Mx3331-H Hybrid Firmware » Version: N/A

cpe:2.3:o:lenovo:thinkagile_mx3331-h_hybrid_firmware:-
Lenovo » Thinkagile Mx3530-H Hybrid Firmware » Version: N/A

cpe:2.3:o:lenovo:thinkagile_mx3530-h_hybrid_firmware:-
Lenovo » Thinkagile Mx3530 F All Flash Firmware » Version: N/A

cpe:2.3:o:lenovo:thinkagile_mx3530_f_all_flash_firmware:-
Lenovo » Thinkagile Mx3531-F All-Flash Firmware » Version: N/A

cpe:2.3:o:lenovo:thinkagile_mx3531-f_all-flash_firmware:-
Lenovo » Thinkagile Mx3531 H Hybrid Firmware » Version: N/A

cpe:2.3:o:lenovo:thinkagile_mx3531_h_hybrid_firmware:-
Lenovo » Thinkagile Vx2330 Firmware » Version: N/A

cpe:2.3:o:lenovo:thinkagile_vx2330_firmware:-
Lenovo » Thinkagile Vx3330 Firmware » Version: N/A

cpe:2.3:o:lenovo:thinkagile_vx3330_firmware:-
Lenovo » Thinkagile Vx3331 Firmware » Version: N/A

cpe:2.3:o:lenovo:thinkagile_vx3331_firmware:-
Lenovo » Thinkagile Vx3530-G Firmware » Version: N/A

cpe:2.3:o:lenovo:thinkagile_vx3530-g_firmware:-
Lenovo » Thinkagile Vx5530 Firmware » Version: N/A

cpe:2.3:o:lenovo:thinkagile_vx5530_firmware:-
Lenovo » Thinkagile Vx7330 Firmware » Version: N/A

cpe:2.3:o:lenovo:thinkagile_vx7330_firmware:-
Lenovo » Thinkagile Vx7530 Firmware » Version: N/A

cpe:2.3:o:lenovo:thinkagile_vx7530_firmware:-
Lenovo » Thinkagile Vx7531 Firmware » Version: N/A

cpe:2.3:o:lenovo:thinkagile_vx7531_firmware:-
Lenovo » Thinksystem Sd630 V2 Firmware » Version: N/A

cpe:2.3:o:lenovo:thinksystem_sd630_v2_firmware:-
Lenovo » Thinksystem Sd650-N V2 Firmware » Version: N/A

cpe:2.3:o:lenovo:thinksystem_sd650-n_v2_firmware:-
Lenovo » Thinksystem Sd650 V2 Firmware » Version: N/A

cpe:2.3:o:lenovo:thinksystem_sd650_v2_firmware:-
Lenovo » Thinksystem Sd650 V3 Firmware » Version: N/A

cpe:2.3:o:lenovo:thinksystem_sd650_v3_firmware:-
Lenovo » Thinksystem Sd665 V3 Firmware » Version: N/A

cpe:2.3:o:lenovo:thinksystem_sd665_v3_firmware:-
Lenovo » Thinksystem Sn550 V2 Firmware » Version: N/A

cpe:2.3:o:lenovo:thinksystem_sn550_v2_firmware:-
Lenovo » Thinksystem Sr250 Firmware » Version: N/A

cpe:2.3:o:lenovo:thinksystem_sr250_firmware:-
Lenovo » Thinksystem Sr258 V2 Firmware » Version: N/A

cpe:2.3:o:lenovo:thinksystem_sr258_v2_firmware:-
Lenovo » Thinksystem Sr630 V2 Firmware » Version: N/A

cpe:2.3:o:lenovo:thinksystem_sr630_v2_firmware:-
Lenovo » Thinksystem Sr630 V3 Firmware » Version: N/A

cpe:2.3:o:lenovo:thinksystem_sr630_v3_firmware:-
Lenovo » Thinksystem Sr635 V3 Firmware » Version: N/A

cpe:2.3:o:lenovo:thinksystem_sr635_v3_firmware:-
Lenovo » Thinksystem Sr645 Firmware » Version: N/A

cpe:2.3:o:lenovo:thinksystem_sr645_firmware:-
Lenovo » Thinksystem Sr645 V3 Firmware » Version: N/A

cpe:2.3:o:lenovo:thinksystem_sr645_v3_firmware:-
Lenovo » Thinksystem Sr650 V2 Firmware » Version: N/A

cpe:2.3:o:lenovo:thinksystem_sr650_v2_firmware:-
Lenovo » Thinksystem Sr650 V3 Firmware » Version: N/A

cpe:2.3:o:lenovo:thinksystem_sr650_v3_firmware:-
Lenovo » Thinksystem Sr655 V3 Firmware » Version: N/A

cpe:2.3:o:lenovo:thinksystem_sr655_v3_firmware:-
Lenovo » Thinksystem Sr665 Firmware » Version: N/A

cpe:2.3:o:lenovo:thinksystem_sr665_firmware:-
Lenovo » Thinksystem Sr665 V3 Firmware » Version: N/A

cpe:2.3:o:lenovo:thinksystem_sr665_v3_firmware:-
Lenovo » Thinksystem Sr670 Firmware » Version: N/A

cpe:2.3:o:lenovo:thinksystem_sr670_firmware:-
Lenovo » Thinksystem Sr670 V2 Firmware » Version: N/A

cpe:2.3:o:lenovo:thinksystem_sr670_v2_firmware:-
Lenovo » Thinksystem Sr675 V3 Firmware » Version: N/A

cpe:2.3:o:lenovo:thinksystem_sr675_v3_firmware:-
Lenovo » Thinksystem Sr850 V2 Firmware » Version: N/A

cpe:2.3:o:lenovo:thinksystem_sr850_v2_firmware:-
Lenovo » Thinksystem Sr850 V3 Firmware » Version: N/A

cpe:2.3:o:lenovo:thinksystem_sr850_v3_firmware:-
Lenovo » Thinksystem Sr860 V2 Firmware » Version: N/A

cpe:2.3:o:lenovo:thinksystem_sr860_v2_firmware:-
Lenovo » Thinksystem Sr860 V3 Firmware » Version: N/A

cpe:2.3:o:lenovo:thinksystem_sr860_v3_firmware:-
Lenovo » Thinksystem St250 V2 Firmware » Version: N/A

cpe:2.3:o:lenovo:thinksystem_st250_v2_firmware:-
Lenovo » Thinksystem St258 V2 Firmware » Version: N/A

cpe:2.3:o:lenovo:thinksystem_st258_v2_firmware:-
Lenovo » Thinksystem St650 V2 Firmware » Version: N/A

cpe:2.3:o:lenovo:thinksystem_st650_v2_firmware:-
Lenovo » Thinksystem St650 V3 Firmware » Version: N/A

cpe:2.3:o:lenovo:thinksystem_st650_v3_firmware:-
Lenovo » Thinksystem St658 V2 Firmware » Version: N/A

cpe:2.3:o:lenovo:thinksystem_st658_v2_firmware:-
Lenovo » Thinksystem St658 V3 Firmware » Version: N/A

cpe:2.3:o:lenovo:thinksystem_st658_v3_firmware:-

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2023-4606

Products

Pricing

Contact Us