01 Record

CVE-2024-38509

A privilege escalation vulnerability was discovered in XCC that could allow an authenticated XCC user with elevated privileges to execute arbitrary code via a specially crafted IPMI command.

HighPUBLISHEDCNA: lenovo

CNA base score7.2 CVSS v3.xCVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H

View raw JSON

02 Description

A privilege escalation vulnerability was discovered in XCC that could allow an authenticated XCC user with elevated privileges to execute arbitrary code via a specially crafted IPMI command.

03 Exploitation and scoring

Exploitation

Assessed, none found. CISA's assessment recorded neither public exploit code nor evidence of exploitation when it was made.

SSVC decision

ExploitationnoneCISA recorded no public exploit code and no evidence of exploitation.
AutomatablenoAt least one step from reconnaissance to exploitation cannot be reliably automated.
Technical ImpacttotalSuccessful exploitation gives total control of the vulnerable component.

CISA publishes the decision points, not a final SSVC decision. The decision also depends on mission and well-being impact, which is a property of your deployment rather than of the vulnerability.

EPSS probability

0.55% probability of exploitation activity in the next 30 days.

EPSS percentile

Equal to or higher than the score of 45.7% of scored records. A rank, not a probability.

NVD base score

7.2 (CVSS v3.x), scored by the NVD independently of the CNA.

NVD CVSS vector

CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H

NVD analysis status

Deferred. NVD last modified this record on 2026-06-17.

Red Hat severity

No Red Hat rating. Red Hat rates the CVEs that affect its products.

Exploit-prediction scores from FIRST. Independent scoring and analysis status from the NVD. Vendor severity from Red Hat. Exploitation assessment and catalog membership from CISA.

04 Metadata

Published

2024-07-26 19:45Z2 YR AGO

Last updated

2024-08-02 04:12Z2 YR AGO

Reserved

2024-06-18

Assigning CNA

lenovo

Record state

PUBLISHED

Severity

High (CVSS 7.2)

CNA CVSS vector

CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H

Weaknesses

CWE-121Stack-based Buffer OverflowVariant

Data version

5.1

Document digest

c358ac44931c95b972406c2f41ab644629f3686eb9629978bc35066122a5c83d

05 Affected products

VendorProductVersionsPlatforms

LenovoXClarity Controllervarious—

lenovothinkagile_hx5530_firmware0 to < 4.71—

lenovothinkagile_hx7530_firmware0 to < 4.71—

lenovothinkagile_vx3331_firmware0 to < 4.71—

lenovothinkagile_hx_enclosure_certified_node_firmware0 to < 4.11—

lenovothinkagile_hx1021_edg_firmware0 to < 4.11—

lenovothinkagile_hx1320_firmware0 to < 9.97—

lenovothinkagile_hx1331_firmware0 to < 4.71—

lenovothinkagile_hx1321_firmware0 to < 9.97—

lenovothinkagile_hx1520-r_firmware0 to < 9.97—

lenovothinkagile_hx1521-r_firmware0 to < 9.97—

lenovothinkagile_hx2320-e_firmware0 to < 9.97—

lenovothinkagile_hx2321_firmware0 to < 9.97—

lenovothinkagile_hx2330_firmware0 to < 4.71—

lenovothinkagile_hx2331_firmware0 to < 4.71—

lenovothinkagile_hx2720-e_firmware0 to < 4.11—

lenovothinkagile_hx3320_firmware0 to < 9.97—

lenovothinkagile_hx3321_firmware0 to < 9.97—

lenovothinkagile_hx3330_firmware0 to < 4.71—

lenovothinkagile_hx33310 to < 4.71—

lenovothinkagile_hx3375_firmware0 to < 5.61—

lenovothinkagile_hx3376_firmware0 to < 5.61—

lenovothinkagile_hx3520-g_firmware0 to < 9.97—

lenovothinkagile_hx3521-g_firmware0 to < 9.97—

lenovothinkagile_hx3720_firmware0 to < 4.11—

lenovothinkagile_hx3721_firmware0 to < 4.11—

lenovothinkagile_hx5520-c_firmware0 to < 9.97—

lenovothinkagile_hx5521-c_firmware0 to < 9.97—

lenovothinkagile_hx5531_firmware0 to < 4.71—

lenovothinkagile_hx7520_firmware0 to < 9.97—

lenovothinkagile_hx7521_firmware0 to < 9.97—

lenovothinkagile_hx7531_firmware0 to < 4.71—

lenovothinkagile_hx7820_firmware0 to < 3.11—

lenovothinkagile_hx7821_firmware0 to < 3.11—

lenovothinkagile_mx1020_firmware0 to < 4.11—

lenovothinkagile_mx3330-f_firmware0 to < 4.71—

lenovothinkagile_mx3330-h_firmware0 to < 4.71—

lenovothinkagile_mx3331-f_firmware0 to < 4.71—

lenovothinkagile_mx3331-h_firmware0 to < 4.71—

lenovothinkagile_mx3530_f_firmware0 to < 4.71—

lenovothinkagile_mx3530-h_firmware0 to < 4.71—

lenovothinkagile_mx3531-f_firmware0 to < 4.71—

lenovothinkagile_vx1320_firmware0 to < 4.11—

lenovothinkagile_vx2320_firmware0 to < 9.97—

lenovothinkagile_vx2330_firmware0 to < 4.71—

lenovothinkagile_vx3320_firmware0 to < 9.97—

lenovothinkagile_vx3330_firmware0 to < 4.71—

lenovothinkagile_vx3520-g_firmware0 to < 9.97—

lenovothinkagile_vx3530-g_firmware0 to < 4.71—

lenovothinkagile_vx3720_firmware0 to < 4.11—

lenovothinkagile_vx5520_firmware0 to < 9.97—

lenovothinkagile_vx5530_firmware0 to < 4.71—

lenovothinkagile_vx7320_n_firmware0 to < 9.97—

lenovothinkagile_vx7330_firmware0 to < 4.71—

lenovothinkagile_vx7520_firmware0 to < 9.97—

lenovothinkagile_vx7520_n_firmware0 to < 9.97—

lenovothinkagile_vx7530_firmware0 to < 4.71—

lenovothinkagile_vx7531_firmware0 to < 4.71—

lenovothinkagile_vx7820_firmware0 to < 3.11—

lenovothinkstation_p920_workstation_firmware0 to < 9.97—

51 further entries not shown. The complete list is in the raw JSON document.

06 References

support.lenovo.comhttps://support.lenovo.com/us/en/product_security/LEN-156781

07 Remediation

Update to the version (or newer) indicated for your model in the Product Impact section in the advisory: https://support.lenovo.com/us/en/product_security/LEN-156781