Vulnerability Description
A privilege escalation vulnerability was discovered in XCC that could allow an authenticated XCC user with elevated privileges to perform command injection via specially crafted IPMI commands.
CVSS Score
7.2
HIGH
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
Related Weaknesses (CWE)
References
- https://support.lenovo.com/us/en/product_security/LEN-156781
- https://support.lenovo.com/us/en/product_security/LEN-156781
FAQ
What is CVE-2024-38512?
CVE-2024-38512 is a vulnerability with a CVSS score of 7.2 (HIGH). A privilege escalation vulnerability was discovered in XCC that could allow an authenticated XCC user with elevated privileges to perform command injection via specially crafted IPMI commands.
How severe is CVE-2024-38512?
CVE-2024-38512 has been rated HIGH with a CVSS base score of 7.2/10. Review the CVSS metrics above for detailed severity breakdown.
Is there a patch for CVE-2024-38512?
Check the references section above for vendor advisories and patch information. Review vendor security bulletins for remediation guidance.