CVE-2023-25492: A valid, authenticated user may be able to trigger a denial ..

lenovo

May 1, 2023

May 10, 2023

High

8.8

/

10

Description

A valid, authenticated user may be able to trigger a denial of service of the XCC web user interface or other undefined behavior through a format string injection vulnerability in a web interface API.

Products affected:

  • lenovo» thinkagile_hx5530_firmware » *

  • lenovo» thinkagile_hx5530 » -

  • lenovo» thinkagile_hx7530_firmware » *

  • lenovo» thinkagile_hx7530 » -

  • lenovo» thinkagile_vx3331_firmware » *

  • lenovo» thinkagile_vx3331 » -

  • lenovo» thinkagile_hx_enclosure_firmware » *

  • lenovo» thinkagile_hx_enclosure » -

  • lenovo» thinkagile_hx1021_firmware » *

  • lenovo» thinkagile_hx1021 » -

  • lenovo» thinkagile_hx1320_firmware » *

  • lenovo» thinkagile_hx1320 » -

  • lenovo» thinkagile_hx1321_firmware » *

  • lenovo» thinkagile_hx1321 » -

  • lenovo» thinkagile_hx1331_firmware » *

  • lenovo» thinkagile_hx1331 » -

  • lenovo» thinkagile_hx1520-r_firmware » *

  • lenovo» thinkagile_hx1520-r » -

  • lenovo» thinkagile_hx1521-r_firmware » *

  • lenovo» thinkagile_hx1521-r » -

  • lenovo» thinkagile_hx2320-e_firmware » *

  • lenovo» thinkagile_hx2320-e » -

  • lenovo» thinkagile_hx2321_firmware » *

  • lenovo» thinkagile_hx2321 » -

  • lenovo» thinkagile_hx2330_firmware » *

  • lenovo» thinkagile_hx2330_firmware » 2.93_afbt30p

  • lenovo» thinkagile_hx2330 » -

  • lenovo» thinkagile_hx2331_firmware » *

  • lenovo» thinkagile_hx2331 » -

  • lenovo» thinkagile_hx2720-e_firmware » *

  • lenovo» thinkagile_hx2720-e » -

  • lenovo» thinkagile_hx3320_firmware » *

  • lenovo» thinkagile_hx3320 » -

  • lenovo» thinkagile_hx3321_firmware » *

  • lenovo» thinkagile_hx3321 » -

  • lenovo» thinkagile_hx3330_firmware » *

  • lenovo» thinkagile_hx3330 » -

  • lenovo» thinkagile_hx3331_firmware » *

  • lenovo» thinkagile_hx3331 » -

  • lenovo» thinkagile_hx3331_firmware » *

  • lenovo» thinkagile_hx3331 » -

  • lenovo» thinkagile_hx3375_firmware » *

  • lenovo» thinkagile_hx3375 » -

  • lenovo» thinkagile_hx3376_firmware » *

  • lenovo» thinkagile_hx3376 » -

  • lenovo» thinkagile_hx3520-g_firmware » *

  • lenovo» thinkagile_hx3520-g » -

  • lenovo» thinkagile_hx3521-g_firmware » *

  • lenovo» thinkagile_hx3521-g » -

  • lenovo» thinkagile_hx3720_firmware » *

  • lenovo» thinkagile_hx3720 » -

  • lenovo» thinkagile_hx3721_firmware » *

  • lenovo» thinkagile_hx3721 » -

  • lenovo» thinkagile_hx5520_firmware » *

  • lenovo» thinkagile_hx5520 » -

  • lenovo» thinkagile_hx5520-c_firmware » *

  • lenovo» thinkagile_hx5520-c » -

  • lenovo» thinkagile_hx5521_firmware » *

  • lenovo» thinkagile_hx5521 » -

  • lenovo» thinkagile_hx5521-c_firmware » *

  • lenovo» thinkagile_hx5521-c » -

  • lenovo» thinkagile_hx5531_firmware » *

  • lenovo» thinkagile_hx5531 » -

  • lenovo» thinkagile_hx7520_firmware » *

  • lenovo» thinkagile_hx7520 » -

  • lenovo» thinkagile_hx7521_firmware » *

  • lenovo» thinkagile_hx7521 » -

  • lenovo» thinkagile_hx7530_firmware » *

  • lenovo» thinkagile_hx7530 » -

  • lenovo» thinkagile_hx7531_firmware » *

  • lenovo» thinkagile_hx7531 » -

  • lenovo» thinkagile_hx7531_firmware » *

  • lenovo» thinkagile_hx7531 » -

  • lenovo» thinkagile_hx7820_firmware » *

  • lenovo» thinkagile_hx7820 » -

  • lenovo» thinkagile_hx7821_firmware » *

  • lenovo» thinkagile_hx7821 » -

  • lenovo» thinkagile_mx1020_firmware » *

  • lenovo» thinkagile_mx1020 » -

  • lenovo» thinkagile_mx3330-f_firmware » *

  • lenovo» thinkagile_mx3330-f » -

  • lenovo» thinkagile_mx3330-h_firmware » *

  • lenovo» thinkagile_mx3330-h » -

  • lenovo» thinkagile_mx3331-f_firmware » *

  • lenovo» thinkagile_mx3331-f » -

  • lenovo» thinkagile_mx3331-h_firmware » *

  • lenovo» thinkagile_mx3331-h » -

  • lenovo» thinkagile_mx3530_f_firmware » *

  • lenovo» thinkagile_mx3530_f » -

  • lenovo» thinkagile_mx3530-h_firmware » *

  • lenovo» thinkagile_mx3530-h » -

  • lenovo» thinkagile_mx3531_h_firmware » *

  • lenovo» thinkagile_mx3531_h » -

  • lenovo» thinkagile_mx3531-f_firmware » *

  • lenovo» thinkagile_mx3531-f » -

  • lenovo» thinkagile_mx1021_on_se350_firmware » *

  • lenovo» thinkagile_mx1021_on_se350 » -

  • lenovo» thinkagile_vx_1se_firmware » *

  • lenovo» thinkagile_vx_1se » -

  • lenovo» thinkagile_vx_2u4n_firmware » *

  • lenovo» thinkagile_vx_2u4n » -

  • lenovo» thinkagile_vx_4u_firmware » *

  • lenovo» thinkagile_vx_4u » -

  • lenovo» thinkagile_vx1320_firmware » *

  • lenovo» thinkagile_vx1320 » -

  • lenovo» thinkagile_vx2320_firmware » *

  • lenovo» thinkagile_vx2320 » -

  • lenovo» thinkagile_vx2330_firmware » *

  • lenovo» thinkagile_vx2330 » -

  • lenovo» thinkagile_vx3320_firmware » *

  • lenovo» thinkagile_vx3320 » -

  • lenovo» thinkagile_vx3330_firmware » *

  • lenovo» thinkagile_vx3330 » -

  • lenovo» thinkagile_vx3520-g_firmware » *

  • lenovo» thinkagile_vx3520-g » -

  • lenovo» thinkagile_vx3530-g_firmware » *

  • lenovo» thinkagile_vx3530-g » -

  • lenovo» thinkagile_vx3720_firmware » *

  • lenovo» thinkagile_vx3720 » -

  • lenovo» thinkagile_vx5520_firmware » *

  • lenovo» thinkagile_vx5520 » -

  • lenovo» thinkagile_vx5530_firmware » *

  • lenovo» thinkagile_vx5530 » -

  • lenovo» thinkagile_vx7320_n_firmware » *

  • lenovo» thinkagile_vx7320_n » -

  • lenovo» thinkagile_vx7330_firmware » *

  • lenovo» thinkagile_vx7330 » -

  • lenovo» thinkagile_vx7520_firmware » *

  • lenovo» thinkagile_vx7520 » -

  • lenovo» thinkagile_vx7520_n_firmware » *

  • lenovo» thinkagile_vx7520_n » -

  • lenovo» thinkagile_vx7530_firmware » *

  • lenovo» thinkagile_vx7530 » -

  • lenovo» thinkagile_vx7531_firmware » *

  • lenovo» thinkagile_vx7531 » -

  • lenovo» thinkagile_vx7820_firmware » *

  • lenovo» thinkagile_vx7820 » -

  • lenovo» thinkedge_se450__firmware » *

  • lenovo» thinkedge_se450_ » -

  • lenovo» thinkstation_p920_firmware » *

  • lenovo» thinkstation_p920 » -

  • lenovo» thinksystem_sd530_firmware » *

  • lenovo» thinksystem_sd530 » -

  • lenovo» thinksystem_sd630_v2_firmware » *

  • lenovo» thinksystem_sd630_v2 » -

  • lenovo» thinksystem_sd650_firmware » *

  • lenovo» thinksystem_sd650 » -

  • lenovo» thinksystem_sd650_v2_firmware » *

  • lenovo» thinksystem_sd650_v2 » -

  • lenovo» thinksystem_sd650-n_v2_firmware » *

  • lenovo» thinksystem_sd650-n_v2 » -

  • lenovo» thinksystem_se350_firmware » *

  • lenovo» thinksystem_se350 » -

  • lenovo» thinksystem_sn550_firmware » *

  • lenovo» thinksystem_sn550 » -

  • lenovo» thinksystem_sn550_v2_firmware » *

  • lenovo» thinksystem_sn550_v2 » -

  • lenovo» thinksystem_sn850_firmware » *

  • lenovo» thinksystem_sn850 » -

  • lenovo» thinksystem_sr150_firmware » *

  • lenovo» thinksystem_sr150 » -

  • lenovo» thinksystem_sr158_firmware » *

  • lenovo» thinksystem_sr158 » -

  • lenovo» thinksystem_sr250_firmware » *

  • lenovo» thinksystem_sr250 » -

  • lenovo» thinksystem_sr250_v2_firmware » *

  • lenovo» thinksystem_sr250_v2 » -

  • lenovo» thinksystem_sr258_firmware » *

  • lenovo» thinksystem_sr258 » -

  • lenovo» thinksystem_sr258_v2_firmware » *

  • lenovo» thinksystem_sr258_v2 » -

  • lenovo» thinksystem_sr530_firmware » *

  • lenovo» thinksystem_sr530 » -

  • lenovo» thinksystem_sr550_firmware » *

  • lenovo» thinksystem_sr550 » -

  • lenovo» thinksystem_sr570_firmware » *

  • lenovo» thinksystem_sr570 » -

  • lenovo» thinksystem_sr590_firmware » *

  • lenovo» thinksystem_sr590 » -

  • lenovo» thinksystem_sr630_firmware » *

  • lenovo» thinksystem_sr630 » -

  • lenovo» thinksystem_sr630_v2_firmware » *

  • lenovo» thinksystem_sr630_v2 » -

  • lenovo» thinksystem_sr645_firmware » *

  • lenovo» thinksystem_sr645 » -

  • lenovo» thinksystem_sr645_v3_firmware » *

  • lenovo» thinksystem_sr645_v3 » -

  • lenovo» thinksystem_sr650_firmware » *

  • lenovo» thinksystem_sr650 » -

  • lenovo» thinksystem_sr650_v2_firmware » *

  • lenovo» thinksystem_sr650_v2 » -

  • lenovo» thinksystem_sr665_firmware » *

  • lenovo» thinksystem_sr665 » -

  • lenovo» thinksystem_sr665_v3_firmware » *

  • lenovo» thinksystem_sr665_v3 » -

  • lenovo» thinksystem_sr670_firmware » *

  • lenovo» thinksystem_sr670 » -

  • lenovo» thinksystem_sr670_v2_firmware » *

  • lenovo» thinksystem_sr670_v2 » -

  • lenovo» thinksystem_sr850_firmware » *

  • lenovo» thinksystem_sr850 » -

  • lenovo» thinksystem_sr850_v2_firmware » *

  • lenovo» thinksystem_sr850_v2 » -

  • lenovo» thinksystem_sr850p_firmware » *

  • lenovo» thinksystem_sr850p » -

  • lenovo» thinksystem_sr860_firmware » *

  • lenovo» thinksystem_sr860 » -

  • lenovo» thinksystem_sr860_v2_firmware » *

  • lenovo» thinksystem_sr860_v2 » -

  • lenovo» thinksystem_sr950_firmware » *

  • lenovo» thinksystem_sr950 » -

  • lenovo» thinksystem_st250_firmware » *

  • lenovo» thinksystem_st250 » -

  • lenovo» thinksystem_st250_v2_firmware » *

  • lenovo» thinksystem_st250_v2 » -

  • lenovo» thinksystem_st258_firmware » *

  • lenovo» thinksystem_st258 » -

  • lenovo» thinksystem_st258_v2_firmware » *

  • lenovo» thinksystem_st258_v2 » -

  • lenovo» thinksystem_st550_firmware » *

  • lenovo» thinksystem_st550 » -

  • lenovo» thinksystem_st650_v2_firmware » *

  • lenovo» thinksystem_st650_v2 » -

  • lenovo» thinksystem_st658_v2_firmware » *

  • lenovo» thinksystem_st658_v2 » -

Are your APIs vulnerable to this CWE?

Are your APIs vulnerable to this CWE?

Are your APIs vulnerable to this CWE?

In a few clicks Akto can analyze your API attack surface and see what APIs are vulnerable to OWASP Top 10 and other common CWEs.

Akto BG image
Akto BG image
Akto BG image

Severity

High

High

8.8

/

10

CVSS base metrics

Attack vector

NETWORK

Attack complexity

LOW

Privileges required

LOW

User interaction

NONE

Scope

UNCHANGED

Confidentiality

HIGH

Integrity

HIGH

Availability

HIGH

Exploitability Score

2.8

Impact Score

5.9

Weakness

CWE-134__CWE-134__

Explore more from Akto

Blog

Be updated about everything related to API Security, new API vulnerabilities, industry news and product updates.

Test Library

Discover and find tests from Akto's 100+ API Security test library. Choose your template or add a new template to start your API Security testing.

Documentation

Check out Akto's product documentation for all information related to features and how to use them.