Lenovo XClarity Controller 安全漏洞(CVE-2023-29058)

CVE编号

CVE-2023-29058

利用情况

暂无

补丁情况

N/A

披露时间

2023-04-29
漏洞描述
Lenovo XClarity Controller（XCC）是中国联想（Lenovo）公司的一款服务器嵌入式管理引擎，它主要用于标准化和自动化基础服务器管理任务。
Lenovo XClarity Controller存在安全漏洞，该漏洞源于具有只读权限且经过身份验证的有效XCC用户可以通过XCC CLI修改其他用户帐户的自定义用户角色和用户侵入消息。
解决建议
建议您更新当前系统或软件至最新版，完成漏洞的修复。
参考链接
https://support.lenovo.com/us/en/product_security/LEN-118321
受影响软件情况
# 类型 厂商 产品 版本 影响面
1
运行在以下环境
系统 lenovo thinkagile_hx1021_firmware * Up to
(excluding)
3.72_tei388s
运行在以下环境
系统 lenovo thinkagile_hx1320_firmware * Up to
(excluding)
8.88_cdi3a4a
运行在以下环境
系统 lenovo thinkagile_hx1321_firmware * Up to
(excluding)
8.88_cdi3a4a
运行在以下环境
系统 lenovo thinkagile_hx1331_firmware * Up to
(excluding)
2.93_afbt30p
运行在以下环境
系统 lenovo thinkagile_hx1520-r_firmware * Up to
(excluding)
8.88_cdi3a4a
运行在以下环境
系统 lenovo thinkagile_hx1521-r_firmware * Up to
(excluding)
8.88_cdi3a4a
运行在以下环境
系统 lenovo thinkagile_hx2320-e_firmware * Up to
(excluding)
8.88_cdi3a4a
运行在以下环境
系统 lenovo thinkagile_hx2321_firmware * Up to
(excluding)
8.88_cdi3a4a
运行在以下环境
系统 lenovo thinkagile_hx2330_firmware * Up to
(excluding)
2.93_afbt30p
运行在以下环境
系统 lenovo thinkagile_hx2330_firmware 2.93_afbt30p -
运行在以下环境
系统 lenovo thinkagile_hx2331_firmware * Up to
(excluding)
2.93_afbt30p
运行在以下环境
系统 lenovo thinkagile_hx2720-e_firmware * Up to
(excluding)
3.72_tei388s
运行在以下环境
系统 lenovo thinkagile_hx3320_firmware * Up to
(excluding)
8.88_cdi3a4a
运行在以下环境
系统 lenovo thinkagile_hx3321_firmware * Up to
(excluding)
8.88_cdi3a4a
运行在以下环境
系统 lenovo thinkagile_hx3330_firmware * Up to
(excluding)
2.93_afbt30p
运行在以下环境
系统 lenovo thinkagile_hx3331_firmware * Up to
(excluding)
2.93_afbt30p
运行在以下环境
系统 lenovo thinkagile_hx3331_firmware * Up to
(excluding)
4.71_d8bt48p
运行在以下环境
系统 lenovo thinkagile_hx3375_firmware * Up to
(excluding)
4.71_d8bt48p
运行在以下环境
系统 lenovo thinkagile_hx3376_firmware * Up to
(excluding)
8.88_cdi3a4a
运行在以下环境
系统 lenovo thinkagile_hx3520-g_firmware * Up to
(excluding)
8.88_cdi3a4a
运行在以下环境
系统 lenovo thinkagile_hx3521-g_firmware * Up to
(excluding)
3.72_tei388s
运行在以下环境
系统 lenovo thinkagile_hx3720_firmware * Up to
(excluding)
3.72_tei388s
运行在以下环境
系统 lenovo thinkagile_hx3721_firmware * Up to
(excluding)
8.88_cdi3a4a
运行在以下环境
系统 lenovo thinkagile_hx5520-c_firmware * Up to
(excluding)
8.88_cdi3a4a
运行在以下环境
系统 lenovo thinkagile_hx5520_firmware * Up to
(excluding)
8.88_cdi3a4a
运行在以下环境
系统 lenovo thinkagile_hx5521-c_firmware * Up to
(excluding)
2.93_afbt30p
运行在以下环境
系统 lenovo thinkagile_hx5521_firmware * Up to
(excluding)
8.88_cdi3a4a
运行在以下环境
系统 lenovo thinkagile_hx5530_firmware * Up to
(excluding)
2.93_afbt30p
运行在以下环境
系统 lenovo thinkagile_hx5531_firmware * Up to
(excluding)
8.88_cdi3a4a
运行在以下环境
系统 lenovo thinkagile_hx7520_firmware * Up to
(excluding)
8.88_cdi3a4a
运行在以下环境
系统 lenovo thinkagile_hx7521_firmware * Up to
(excluding)
2.93_afbt30p
运行在以下环境
系统 lenovo thinkagile_hx7530_firmware * Up to
(excluding)
2.93_afbt30p
运行在以下环境
系统 lenovo thinkagile_hx7531_firmware * Up to
(excluding)
2.75_psi348s
运行在以下环境
系统 lenovo thinkagile_hx7531_firmware * Up to
(excluding)
2.93_afbt30p
运行在以下环境
系统 lenovo thinkagile_hx7820_firmware * Up to
(excluding)
2.75_psi348s
运行在以下环境
系统 lenovo thinkagile_hx7821_firmware * Up to
(excluding)
3.72_tei388s
运行在以下环境
系统 lenovo thinkagile_hx_enclosure_firmware * Up to
(excluding)
3.72_tei388s
运行在以下环境
系统 lenovo thinkagile_mx1020_firmware * Up to
(excluding)
2.93_afbt30p
运行在以下环境
系统 lenovo thinkagile_mx1021_on_se350_firmware * Up to
(excluding)
3.72_tei388s
运行在以下环境
系统 lenovo thinkagile_mx3330-f_firmware * Up to
(excluding)
2.93_afbt30p
运行在以下环境
系统 lenovo thinkagile_mx3330-h_firmware * Up to
(excluding)
2.93_afbt30p
运行在以下环境
系统 lenovo thinkagile_mx3331-f_firmware * Up to
(excluding)
2.93_afbt30p
运行在以下环境
系统 lenovo thinkagile_mx3331-h_firmware * Up to
(excluding)
2.93_afbt30p
运行在以下环境
系统 lenovo thinkagile_mx3530-h_firmware * Up to
(excluding)
2.93_afbt30p
运行在以下环境
系统 lenovo thinkagile_mx3530_f_firmware * Up to
(excluding)
2.93_afbt30p
运行在以下环境
系统 lenovo thinkagile_mx3531-f_firmware * Up to
(excluding)
3.72_tei388s
运行在以下环境
系统 lenovo thinkagile_mx3531_h_firmware * Up to
(excluding)
2.93_afbt30p
运行在以下环境
系统 lenovo thinkagile_vx1320_firmware * Up to
(excluding)
3.72_tei388s
运行在以下环境
系统 lenovo thinkagile_vx2320_firmware * Up to
(excluding)
8.88_cdi3a4a
运行在以下环境
系统 lenovo thinkagile_vx2330_firmware * Up to
(excluding)
2.93_afbt30p
运行在以下环境
系统 lenovo thinkagile_vx3320_firmware * Up to
(excluding)
8.88_cdi3a4a
运行在以下环境
系统 lenovo thinkagile_vx3330_firmware * Up to
(excluding)
2.93_afbt30p
运行在以下环境
系统 lenovo thinkagile_vx3331_firmware * Up to
(excluding)
2.93_afbt30p
运行在以下环境
系统 lenovo thinkagile_vx3520-g_firmware * Up to
(excluding)
8.88_cdi3a4a
运行在以下环境
系统 lenovo thinkagile_vx3530-g_firmware * Up to
(excluding)
2.93_afbt30p
运行在以下环境
系统 lenovo thinkagile_vx3720_firmware * Up to
(excluding)
3.72_tei388s
运行在以下环境
系统 lenovo thinkagile_vx5520_firmware * Up to
(excluding)
8.88_cdi3a4a
运行在以下环境
系统 lenovo thinkagile_vx5530_firmware * Up to
(excluding)
2.93_afbt30p
运行在以下环境
系统 lenovo thinkagile_vx7320_n_firmware * Up to
(excluding)
8.88_cdi3a4a
运行在以下环境
系统 lenovo thinkagile_vx7330_firmware * Up to
(excluding)
2.93_afbt30p
运行在以下环境
系统 lenovo thinkagile_vx7520_firmware * Up to
(excluding)
8.88_cdi3a4a
运行在以下环境
系统 lenovo thinkagile_vx7520_n_firmware * Up to
(excluding)
8.88_cdi3a4a
运行在以下环境
系统 lenovo thinkagile_vx7530_firmware * Up to
(excluding)
2.93_afbt30p
运行在以下环境
系统 lenovo thinkagile_vx7531_firmware * Up to
(excluding)
2.93_afbt30p
运行在以下环境
系统 lenovo thinkagile_vx7820_firmware * Up to
(excluding)
2.75_psi348s
运行在以下环境
系统 lenovo thinkagile_vx_1se_firmware * Up to
(excluding)
3.72_tei388s
运行在以下环境
系统 lenovo thinkagile_vx_2u4n_firmware * Up to
(excluding)
3.72_tei388s
运行在以下环境
系统 lenovo thinkagile_vx_4u_firmware * Up to
(excluding)
2.75_psi348s
运行在以下环境
系统 lenovo thinkedge_se450__firmware * Up to
(excluding)
1.60_usx324o
运行在以下环境
系统 lenovo thinkstation_p920_firmware * Up to
(excluding)
8.88_cdi3a4a
运行在以下环境
系统 lenovo thinksystem_sd530_firmware * Up to
(excluding)
3.72_tei388s
运行在以下环境
系统 lenovo thinksystem_sd630_v2_firmware * Up to
(excluding)
2.60_tgbt42h
运行在以下环境
系统 lenovo thinksystem_sd650-n_v2_firmware * Up to
(excluding)
2.60_tgbt42h
运行在以下环境
系统 lenovo thinksystem_sd650_firmware * Up to
(excluding)
3.72_tei388s
运行在以下环境
系统 lenovo thinksystem_sd650_v2_firmware * Up to
(excluding)
2.60_tgbt42h
运行在以下环境
系统 lenovo thinksystem_se350_firmware * Up to
(excluding)
3.72_tei388s
运行在以下环境
系统 lenovo thinksystem_sn550_firmware * Up to
(excluding)
3.72_tei388s
运行在以下环境
系统 lenovo thinksystem_sn550_v2_firmware * Up to
(excluding)
2.60_tgbt42h
运行在以下环境
系统 lenovo thinksystem_sn850_firmware * Up to
(excluding)
3.72_tei388s
运行在以下环境
系统 lenovo thinksystem_sr150_firmware * Up to
(excluding)
3.72_tei388s
运行在以下环境
系统 lenovo thinksystem_sr158_firmware * Up to
(excluding)
3.72_tei388s
运行在以下环境
系统 lenovo thinksystem_sr250_firmware * Up to
(excluding)
3.72_tei388s
运行在以下环境
系统 lenovo thinksystem_sr250_v2_firmware * Up to
(excluding)
2.60_tgbt42h
运行在以下环境
系统 lenovo thinksystem_sr258_firmware * Up to
(excluding)
3.72_tei388s
运行在以下环境
系统 lenovo thinksystem_sr258_v2_firmware * Up to
(excluding)
2.60_tgbt42h
运行在以下环境
系统 lenovo thinksystem_sr530_firmware * Up to
(excluding)
8.88_cdi3a4a
运行在以下环境
系统 lenovo thinksystem_sr550_firmware * Up to
(excluding)
8.88_cdi3a4a
运行在以下环境
系统 lenovo thinksystem_sr570_firmware * Up to
(excluding)
8.88_cdi3a4a
运行在以下环境
系统 lenovo thinksystem_sr590_firmware * Up to
(excluding)
8.88_cdi3a4a
运行在以下环境
系统 lenovo thinksystem_sr630_firmware * Up to
(excluding)
8.88_cdi3a4a
运行在以下环境
系统 lenovo thinksystem_sr630_v2_firmware * Up to
(excluding)
2.93_afbt30p
运行在以下环境
系统 lenovo thinksystem_sr645_firmware * Up to
(excluding)
4.71_d8bt48p
运行在以下环境
系统 lenovo thinksystem_sr645_v3_firmware * Up to
(excluding)
4.71_d8bt48p
运行在以下环境
系统 lenovo thinksystem_sr650_firmware * Up to
(excluding)
8.88_cdi3a4a
运行在以下环境
系统 lenovo thinksystem_sr650_v2_firmware * Up to
(excluding)
2.93_afbt30p
运行在以下环境
系统 lenovo thinksystem_sr665_firmware * Up to
(excluding)
4.71_d8bt48p
运行在以下环境
系统 lenovo thinksystem_sr665_v3_firmware * Up to
(excluding)
4.71_d8bt48p
运行在以下环境
系统 lenovo thinksystem_sr670_firmware * Up to
(excluding)
3.72_tei388s
运行在以下环境
系统 lenovo thinksystem_sr670_v2_firmware * Up to
(excluding)
2.60_tgbt42h
运行在以下环境
系统 lenovo thinksystem_sr850p_firmware * Up to
(excluding)
3.72_tei388s
运行在以下环境
系统 lenovo thinksystem_sr850_firmware * Up to
(excluding)
3.72_tei388s
运行在以下环境
系统 lenovo thinksystem_sr850_v2_firmware * Up to
(excluding)
2.60_tgbt42h
运行在以下环境
系统 lenovo thinksystem_sr860_firmware * Up to
(excluding)
3.72_tei388s
运行在以下环境
系统 lenovo thinksystem_sr860_v2_firmware * Up to
(excluding)
2.60_tgbt42h
运行在以下环境
系统 lenovo thinksystem_sr950_firmware * Up to
(excluding)
2.75_psi348s
运行在以下环境
系统 lenovo thinksystem_st250_firmware * Up to
(excluding)
3.72_tei388s
运行在以下环境
系统 lenovo thinksystem_st250_v2_firmware * Up to
(excluding)
2.60_tgbt42h
运行在以下环境
系统 lenovo thinksystem_st258_firmware * Up to
(excluding)
3.72_tei388s
运行在以下环境
系统 lenovo thinksystem_st258_v2_firmware * Up to
(excluding)
2.60_tgbt42h
运行在以下环境
系统 lenovo thinksystem_st550_firmware * Up to
(excluding)
8.88_cdi3a4a
运行在以下环境
系统 lenovo thinksystem_st650_v2_firmware * Up to
(excluding)
2.60_tgbt42h
运行在以下环境
系统 lenovo thinksystem_st658_v2_firmware * Up to
(excluding)
2.60_tgbt42h
运行在以下环境
硬件 lenovo thinkagile_hx1021 - -
运行在以下环境
硬件 lenovo thinkagile_hx1320 - -
运行在以下环境
硬件 lenovo thinkagile_hx1321 - -
运行在以下环境
硬件 lenovo thinkagile_hx1331 - -
运行在以下环境
硬件 lenovo thinkagile_hx1520-r - -
运行在以下环境
硬件 lenovo thinkagile_hx1521-r - -
运行在以下环境
硬件 lenovo thinkagile_hx2320-e - -
运行在以下环境
硬件 lenovo thinkagile_hx2321 - -
运行在以下环境
硬件 lenovo thinkagile_hx2330 - -
运行在以下环境
硬件 lenovo thinkagile_hx2331 - -
运行在以下环境
硬件 lenovo thinkagile_hx2720-e - -
运行在以下环境
硬件 lenovo thinkagile_hx3320 - -
运行在以下环境
硬件 lenovo thinkagile_hx3321 - -
运行在以下环境
硬件 lenovo thinkagile_hx3330 - -
运行在以下环境
硬件 lenovo thinkagile_hx3331 - -
运行在以下环境
硬件 lenovo thinkagile_hx3375 - -
运行在以下环境
硬件 lenovo thinkagile_hx3376 - -
运行在以下环境
硬件 lenovo thinkagile_hx3520-g - -
运行在以下环境
硬件 lenovo thinkagile_hx3521-g - -
运行在以下环境
硬件 lenovo thinkagile_hx3720 - -
运行在以下环境
硬件 lenovo thinkagile_hx3721 - -
运行在以下环境
硬件 lenovo thinkagile_hx5520 - -
运行在以下环境
硬件 lenovo thinkagile_hx5520-c - -
运行在以下环境
硬件 lenovo thinkagile_hx5521 - -
运行在以下环境
硬件 lenovo thinkagile_hx5521-c - -
运行在以下环境
硬件 lenovo thinkagile_hx5530 - -
运行在以下环境
硬件 lenovo thinkagile_hx5531 - -
运行在以下环境
硬件 lenovo thinkagile_hx7520 - -
运行在以下环境
硬件 lenovo thinkagile_hx7521 - -
运行在以下环境
硬件 lenovo thinkagile_hx7530 - -
运行在以下环境
硬件 lenovo thinkagile_hx7531 - -
运行在以下环境
硬件 lenovo thinkagile_hx7820 - -
运行在以下环境
硬件 lenovo thinkagile_hx7821 - -
运行在以下环境
硬件 lenovo thinkagile_hx_enclosure - -
运行在以下环境
硬件 lenovo thinkagile_mx1020 - -
运行在以下环境
硬件 lenovo thinkagile_mx1021_on_se350 - -
运行在以下环境
硬件 lenovo thinkagile_mx3330-f - -
运行在以下环境
硬件 lenovo thinkagile_mx3330-h - -
运行在以下环境
硬件 lenovo thinkagile_mx3331-f - -
运行在以下环境
硬件 lenovo thinkagile_mx3331-h - -
运行在以下环境
硬件 lenovo thinkagile_mx3530-h - -
运行在以下环境
硬件 lenovo thinkagile_mx3530_f - -
运行在以下环境
硬件 lenovo thinkagile_mx3531-f - -
运行在以下环境
硬件 lenovo thinkagile_mx3531_h - -
运行在以下环境
硬件 lenovo thinkagile_vx1320 - -
运行在以下环境
硬件 lenovo thinkagile_vx2320 - -
运行在以下环境
硬件 lenovo thinkagile_vx2330 - -
运行在以下环境
硬件 lenovo thinkagile_vx3320 - -
运行在以下环境
硬件 lenovo thinkagile_vx3330 - -
运行在以下环境
硬件 lenovo thinkagile_vx3331 - -
运行在以下环境
硬件 lenovo thinkagile_vx3520-g - -
运行在以下环境
硬件 lenovo thinkagile_vx3530-g - -
运行在以下环境
硬件 lenovo thinkagile_vx3720 - -
运行在以下环境
硬件 lenovo thinkagile_vx5520 - -
运行在以下环境
硬件 lenovo thinkagile_vx5530 - -
运行在以下环境
硬件 lenovo thinkagile_vx7320_n - -
运行在以下环境
硬件 lenovo thinkagile_vx7330 - -
运行在以下环境
硬件 lenovo thinkagile_vx7520 - -
运行在以下环境
硬件 lenovo thinkagile_vx7520_n - -
运行在以下环境
硬件 lenovo thinkagile_vx7530 - -
运行在以下环境
硬件 lenovo thinkagile_vx7531 - -
运行在以下环境
硬件 lenovo thinkagile_vx7820 - -
运行在以下环境
硬件 lenovo thinkagile_vx_1se - -
运行在以下环境
硬件 lenovo thinkagile_vx_2u4n - -
运行在以下环境
硬件 lenovo thinkagile_vx_4u - -
运行在以下环境
硬件 lenovo thinkedge_se450_ - -
运行在以下环境
硬件 lenovo thinkstation_p920 - -
运行在以下环境
硬件 lenovo thinksystem_sd530 - -
运行在以下环境
硬件 lenovo thinksystem_sd630_v2 - -
运行在以下环境
硬件 lenovo thinksystem_sd650 - -
运行在以下环境
硬件 lenovo thinksystem_sd650-n_v2 - -
运行在以下环境
硬件 lenovo thinksystem_sd650_v2 - -
运行在以下环境
硬件 lenovo thinksystem_se350 - -
运行在以下环境
硬件 lenovo thinksystem_sn550 - -
运行在以下环境
硬件 lenovo thinksystem_sn550_v2 - -
运行在以下环境
硬件 lenovo thinksystem_sn850 - -
运行在以下环境
硬件 lenovo thinksystem_sr150 - -
运行在以下环境
硬件 lenovo thinksystem_sr158 - -
运行在以下环境
硬件 lenovo thinksystem_sr250 - -
运行在以下环境
硬件 lenovo thinksystem_sr250_v2 - -
运行在以下环境
硬件 lenovo thinksystem_sr258 - -
运行在以下环境
硬件 lenovo thinksystem_sr258_v2 - -
运行在以下环境
硬件 lenovo thinksystem_sr530 - -
运行在以下环境
硬件 lenovo thinksystem_sr550 - -
运行在以下环境
硬件 lenovo thinksystem_sr570 - -
运行在以下环境
硬件 lenovo thinksystem_sr590 - -
运行在以下环境
硬件 lenovo thinksystem_sr630 - -
运行在以下环境
硬件 lenovo thinksystem_sr630_v2 - -
运行在以下环境
硬件 lenovo thinksystem_sr645 - -
运行在以下环境
硬件 lenovo thinksystem_sr645_v3 - -
运行在以下环境
硬件 lenovo thinksystem_sr650 - -
运行在以下环境
硬件 lenovo thinksystem_sr650_v2 - -
运行在以下环境
硬件 lenovo thinksystem_sr665 - -
运行在以下环境
硬件 lenovo thinksystem_sr665_v3 - -
运行在以下环境
硬件 lenovo thinksystem_sr670 - -
运行在以下环境
硬件 lenovo thinksystem_sr670_v2 - -
运行在以下环境
硬件 lenovo thinksystem_sr850 - -
运行在以下环境
硬件 lenovo thinksystem_sr850p - -
运行在以下环境
硬件 lenovo thinksystem_sr850_v2 - -
运行在以下环境
硬件 lenovo thinksystem_sr860 - -
运行在以下环境
硬件 lenovo thinksystem_sr860_v2 - -
运行在以下环境
硬件 lenovo thinksystem_sr950 - -
运行在以下环境
硬件 lenovo thinksystem_st250 - -
运行在以下环境
硬件 lenovo thinksystem_st250_v2 - -
运行在以下环境
硬件 lenovo thinksystem_st258 - -
运行在以下环境
硬件 lenovo thinksystem_st258_v2 - -
运行在以下环境
硬件 lenovo thinksystem_st550 - -
运行在以下环境
硬件 lenovo thinksystem_st650_v2 - -
运行在以下环境
硬件 lenovo thinksystem_st658_v2 - -
CVSS3评分
6.5
  • 攻击路径
    网络
  • 攻击复杂度
    低
  • 权限要求
    低
  • 影响范围
    未更改
  • 用户交互
    无
  • 可用性
    无
  • 保密性
    无
  • 完整性
    高
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N
CWE-ID 漏洞类型
NVD-CWE-noinfo
阿里云安全产品覆盖情况