A buffer overflow exists in the Remote Presence subsystem which can potentially allow valid, authenticated users to cause a recoverable subsystem denial of service.
CVSS Vector
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:HLenovo Thinkagile Hx1021
HWLenovoall versionsLenovo Thinkagile Hx1021 Firmware
OSLenovo< 3.60_tei386mLenovo Thinkagile Hx1320
HWLenovoall versionsLenovo Thinkagile Hx1320 Firmware
OSLenovo< 8.40-cdi394nLenovo Thinkagile Hx1321
HWLenovoall versionsLenovo Thinkagile Hx1321 Firmware
OSLenovo< 8.40-cdi394nLenovo Thinkagile Hx1520 R
HWLenovoall versionsLenovo Thinkagile Hx1520 R Firmware
OSLenovo< 8.40-cdi394nLenovo Thinkagile Hx1521 R
HWLenovoall versionsLenovo Thinkagile Hx1521 R Firmware
OSLenovo< 8.40-cdi394nLenovo Thinkagile Hx2320 E
HWLenovoall versionsLenovo Thinkagile Hx2320 E Firmware
OSLenovo< 8.40-cdi394nLenovo Thinkagile Hx2321
HWLenovoall versionsLenovo Thinkagile Hx2321 Firmware
OSLenovo< 8.40-cdi394nLenovo Thinkagile Hx2720 E
HWLenovoall versionsLenovo Thinkagile Hx2720 E Firmware
OSLenovo< 5.20_tei3c8mLenovo Thinkagile Hx3320
HWLenovoall versionsLenovo Thinkagile Hx3320 Firmware
OSLenovo< 8.40-cdi394nLenovo Thinkagile Hx3321
HWLenovoall versionsLenovo Thinkagile Hx3321 Firmware
OSLenovo< 8.40-cdi394nLenovo Thinkagile Hx3375
HWLenovoall versionsLenovo Thinkagile Hx3375 Firmware
OSLenovo< 4.10_d8bt38lLenovo Thinkagile Hx3376
HWLenovoall versionsLenovo Thinkagile Hx3376 Firmware
OSLenovo< 4.10_d8bt38lLenovo Thinkagile Hx3520 G
HWLenovoall versionsLenovo Thinkagile Hx3520 G Firmware
OSLenovo< 8.40-cdi394nLenovo Thinkagile Hx3521 G
HWLenovoall versionsLenovo Thinkagile Hx3521 G Firmware
OSLenovo< 8.40-cdi394nLenovo Thinkagile Hx3720
HWLenovoall versionsLenovo Thinkagile Hx3720 Firmware
OSLenovo< 5.20_tei3c8m
🔵
CHECK WITH VENDOR
No clear patch data available. Check vendor references.
Tags
DoSMemory
Related vulnerabilities
CVE-2021-3849CRITICAL9.8PL ✓same product
Auth Bypass w firmware Lenovo FPC2 i SMM — zdalne wykonanie poleceń
CVE-2021-3897CRITICAL9.8PL ✓same product
Auth Bypass w firmware Lenovo FPC2 i SMM — nieautoryzowane wykonanie poleceń
CVE-2024-2659HIGH7.2same product
A command injection vulnerability was identified in SMM/SMM2 and FPC that could allow an authenticated user w...
CVE-2023-4606HIGH8.1same product
An authenticated XCC user with Read-Only permission can change a different user’s password through a crafted A...
CVE-2023-4607HIGH7.5same product
An authenticated XCC user can change permissions for any user through a crafted API command.