What’s Vulnerable › Vulnerabilities

CVE-2023-4607

Severity: high (CVSS 8.8 v3.1)
Exploited in the wild: not listed in CISA KEV
EPSS: 0.5% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2023-10-25 · updated 2026-06-17
Weakness: CWE-269

Description

An authenticated XCC user can change permissions for any user through a crafted API command.

Affected products

Lenovo Thinkagile Hx1021 Edg Firmware: all versions
Lenovo Thinkagile Hx1320 Firmware: all versions
Lenovo Thinkagile Hx1321 Firmware: all versions
Lenovo Thinkagile Hx1331 Firmware: all versions
Lenovo Thinkagile Hx1520-R Firmware: all versions
Lenovo Thinkagile Hx1521-R Firmware: all versions
Lenovo Thinkagile Hx2320-E Firmware: all versions
Lenovo Thinkagile Hx2321 Firmware: all versions
Lenovo Thinkagile Hx2330 Firmware: all versions
Lenovo Thinkagile Hx2331 Firmware: all versions
Lenovo Thinkagile Hx2720-E Firmware: all versions
Lenovo Thinkagile Hx3320 Firmware: all versions
Lenovo Thinkagile Hx3321 Firmware: all versions
Lenovo Thinkagile Hx3330 Firmware: all versions
Lenovo Thinkagile Hx3331 Firmware: all versions
Lenovo Thinkagile Hx3375 Firmware: all versions
Lenovo Thinkagile Hx3376 Firmware: all versions
Lenovo Thinkagile Hx3520-G Firmware: all versions
Lenovo Thinkagile Hx3521-G Firmware: all versions
Lenovo Thinkagile Hx3720 Firmware: all versions
Lenovo Thinkagile Hx3721 Firmware: all versions
Lenovo Thinkagile Hx5520-C Firmware: all versions
Lenovo Thinkagile Hx5520 Firmware: all versions
Lenovo Thinkagile Hx5521-C Firmware: all versions
Lenovo Thinkagile Hx5521 Firmware: all versions
Lenovo Thinkagile Hx5530 Firmware: all versions
Lenovo Thinkagile Hx5531 Firmware: all versions
Lenovo Thinkagile Hx7520 Firmware: all versions
Lenovo Thinkagile Hx7521 Firmware: all versions
Lenovo Thinkagile Hx7530 Firmware: all versions

References

Get alerted when CVE-2023-4607 or the next vulnerability affects your stack