Vendor/product archive

lenovo / xclarity_controller CVEs

Beta · best-effort

4 CVEs tagged to lenovo / xclarity_controller — 0 Critical, 0 High, 4 Medium, 0 Low, 0 Unrated.

See this archive with more filters Back to lenovo vendor archive

CVE-2021-3956

Published May 18, 2022

A read-only authentication bypass vulnerability was reported in the Third Quarter 2021 release of Lenovo XClarity Controller (XCC) firmware affecting XCC devices configured in LDA…

CVSS 4.3 · Medium

Vendor/product tagsBeta · best-effort

CVE-2021-3473

Published Apr 13, 2021

An internal product security audit of Lenovo XClarity Controller (XCC) discovered that the XCC configuration backup/restore password may be written to an internal XCC log buffer i…

CVSS 4.5 · Medium

Vendor/product tagsBeta · best-effort

CVE-2019-6195

Published Feb 14, 2020

An authorization bypass exists in Lenovo XClarity Controller (XCC) versions prior to 3.08 CDI340V, 3.01 TEI392O, 1.71 PSI328N where a valid authenticated user with lesser privileg…

CVSS 4.8 · Medium

Vendor/product tagsBeta · best-effort

CVE-2019-6187

Published Nov 20, 2019

A stored CSV Injection vulnerability was reported in Lenovo XClarity Controller (XCC) that could allow an administrative or other appropriately permissioned user to store malforme…

CVSS 6.5 · Medium

Vendor/product tagsBeta · best-effort

Showing 1-4 of 4 CVEsPage 1 of 1