VendorsLenovothinkagile_mx3331-f_all-flashall versions
Vulnerabilities

Lenovo THINKAGILE MX3331-F ALL-FLASH

Ranked by severity, then by exploit likelihood. Click a CVE ID for its full record.

3CVEs
CVE-2023-4607
An authenticated XCC user can change permissions for any user through a crafted API command.
Published 2023-10-24 · Modified
8.8EPSS 0.005
CVE-2023-4606
An authenticated XCC user with Read-Only permission can change a different user’s password through a crafted API command.   This affects ThinkSystem v2 and v3 servers with XCC; ThinkSystem v1 servers are not affected.
Published 2023-10-24 · Modified
8.1EPSS 0.005
CVE-2023-4608
An authenticated XCC user with elevated privileges can perform blind SQL injection in limited cases through a crafted API command.  This affects ThinkSystem v2 and v3 servers with XCC; ThinkSystem v1 servers are not affected.
Published 2023-10-24 · Modified
7.2EPSS 0.004