Advisories · Technology
Lenovo XClarity Controller.
Every CVE that names Lenovo XClarity Controller among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.
- CVSS 7.2 High
OS command injection in Lenovo XClarity Controller
- Lenovo XClarity Controller
- Command injection
- CVSS 7.2 High
OS command injection in Lenovo XClarity Controller
- Lenovo XClarity Controller
- Command injection
- CVSS 7.2 High
OS command injection in Lenovo XClarity Controller
- Lenovo XClarity Controller
- Command injection
- CVSS 7.2 High
Stack-based buffer overflow in Lenovo XClarity Controller
- Lenovo XClarity Controller
- Memory corruption
- CVSS 7.2 High
OS command injection in Lenovo XClarity Controller
- Lenovo XClarity Controller
- Command injection
- CVSS 8.3 High
Improper input validation in Lenovo XClarity Controller
- Lenovo XClarity Controller
- CWE-20
- CVSS 6.3 Medium
Uncontrolled format string in Lenovo XClarity Controller
- Lenovo XClarity Controller
- Memory corruption
- CVSS 4.9 Medium
Insufficiently protected credentials in Lenovo XClarity Controller
- Lenovo XClarity Controller
- Hard-coded credentials
- CVSS 5.3 Medium
Improper privilege management in Lenovo XClarity Controller
- Lenovo XClarity Controller
- Privilege escalation
- CVSS 7.3 High
Incorrect default permissions in Lenovo XClarity Controller
- Lenovo XClarity Controller
- Broken access control
- CVSS 6.4 Medium
Incorrect default permissions in Lenovo XClarity Controller
- Lenovo XClarity Controller
- Broken access control
- CVSS 2.7 Low
The Remote Mount feature can potentially be abused by valid, authenticated users to make connections to internal services that may not normally be accessible to users.
- Lenovo XClarity Controller
- CWE-184
- CVSS 7.2 High
Stack-based buffer overflow in Lenovo XClarity Controller
- Lenovo XClarity Controller
- Memory corruption