Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-x3wg-9gxm-mq7c

Опубликовано: 26 июл. 2024
Источник: github
Github: Не прошло ревью
CVSS3: 7.2

Описание

A privilege escalation vulnerability was discovered in XCC that could allow an authenticated XCC user with elevated privileges to perform command injection via specially crafted IPMI commands.

A privilege escalation vulnerability was discovered in XCC that could allow an authenticated XCC user with elevated privileges to perform command injection via specially crafted IPMI commands.

EPSS

Процентиль: 66%
0.00504
Низкий

7.2 High

CVSS3

Дефекты

CWE-78

Связанные уязвимости

CVSS3: 7.2
nvd
больше 1 года назад

A privilege escalation vulnerability was discovered in XCC that could allow an authenticated XCC user with elevated privileges to perform command injection via specially crafted IPMI commands.

CVSS3: 7.2
fstec
больше 1 года назад

Уязвимость контроллера Lenovo XClarity Controller (XCC) для серверов Lenovo ThinkSystem, позволяющая нарушителю выполнить произвольные команды

EPSS

Процентиль: 66%
0.00504
Низкий

7.2 High

CVSS3

Дефекты

CWE-78