XClarity Controller

various

OTHER 5 CVEs

See product security advisory below

OTHER 2 CVEs

Refer to Mitigation strategy section in LEN-99936

OTHER 1 CVE

Refer to Mitigation strategy section in LEN-118321

OTHER 3 CVEs

CVE-2024-38512

A privilege escalation vulnerability was discovered in XCC that could allow an authenticated XCC user with elevated privileges to perform command injection via specially crafted IPMI commands.

HIGH Jul 26, 2024

CVE-2024-38511

A privilege escalation vulnerability was discovered in an upload processing functionality of XCC that could allow an authenticated XCC user with elevated privileges to perform command injection via specially crafted file uploads.

HIGH Jul 26, 2024

CVE-2024-38510

A privilege escalation vulnerability was discovered in the SSH captive command shell interface that could allow an authenticated XCC user with elevated privileges to perform command injection via specially crafted file uploads.

HIGH Jul 26, 2024

CVE-2024-38509

A privilege escalation vulnerability was discovered in XCC that could allow an authenticated XCC user with elevated privileges to execute arbitrary code via a specially crafted IPMI command.

HIGH Jul 26, 2024

CVE-2024-38508

A privilege escalation vulnerability was discovered in the web interface or SSH captive command shell interface of XCC that could allow an authenticated XCC user with elevated privileges to perform command injection via a specially crafted request.

HIGH Jul 26, 2024