CVE-2023-4607 :: Enginsight Vulnerability Database

Provider	Type	Base Score	Atk. Vector	Atk. Complexity	Priv. Required	Vector
NIST	NIST	7.5 HIGH	NETWORK	HIGH	LOW	CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H
lenovo	CNA	7.5 HIGH	NETWORK	HIGH	LOW	CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H
CVE	ADP	---				---
CISA-ADP	ADP	---				---

Base Score

CVSS 3.x

EPSS Score

Percentile: 39%

Vendor	Product	Version
lenovo	thinkagile_hx5530_firmware	-
lenovo	thinkagile_hx7530_firmware	-
lenovo	thinkagile_vx3331_firmware	-
lenovo	thinkagile_hx1331_firmware	-
lenovo	thinkagile_hx2330_firmware	-
lenovo	thinkagile_hx2331_firmware	-
lenovo	thinkagile_hx3330_firmware	-
lenovo	thinkagile_hx3331_firmware	-
lenovo	thinkagile_hx3331_firmware	-
lenovo	thinkagile_hx3375_firmware	-
lenovo	thinkagile_hx3376_firmware	-
lenovo	thinkagile_hx5531_firmware	-
lenovo	thinkagile_hx7530_firmware	-
lenovo	thinkagile_hx7531_firmware	-
lenovo	thinkagile_hx7531_firmware	-
lenovo	thinkagile_mx3330-f_all-flash_firmware	-
lenovo	thinkagile_mx3330-h_hybrid_firmware	-
lenovo	thinkagile_mx3331-f_all-flash_firmware	-
lenovo	thinkagile_mx3331-h_hybrid_firmware	-
lenovo	thinkagile_mx3530_f_all_flash_firmware	-
lenovo	thinkagile_mx3530-h_hybrid_firmware	-
lenovo	thinkagile_mx3531_h_hybrid_firmware	-
lenovo	thinkagile_mx3531-f_all-flash_firmware	-
lenovo	thinkagile_vx2330_firmware	-
lenovo	thinkagile_vx3330_firmware	-
lenovo	thinkagile_vx3530-g_firmware	-
lenovo	thinkagile_vx5530_firmware	-
lenovo	thinkagile_vx7330_firmware	-
lenovo	thinkagile_vx7530_firmware	-
lenovo	thinkagile_vx7531_firmware	-
lenovo	thinksystem_sd630_v2_firmware	-
lenovo	thinksystem_sd650_v2_firmware	-
lenovo	thinksystem_sd650_v3_firmware	-
lenovo	thinksystem_sd650-n_v2_firmware	-
lenovo	thinksystem_sd665_v3_firmware	-
lenovo	thinksystem_sn550_v2_firmware	-
lenovo	thinksystem_sr250_firmware	-
lenovo	thinksystem_sr258_v2_firmware	-
lenovo	thinksystem_sr630_v2_firmware	-
lenovo	thinksystem_sr630_v3_firmware	-
lenovo	thinksystem_sr635_v3_firmware	-
lenovo	thinksystem_sr645_firmware	-
lenovo	thinksystem_sr645_v3_firmware	-
lenovo	thinksystem_sr650_v2_firmware	-
lenovo	thinksystem_sr650_v3_firmware	-
lenovo	thinksystem_sr655_v3_firmware	-
lenovo	thinksystem_sr665_firmware	-
lenovo	thinksystem_sr665_v3_firmware	-
lenovo	thinksystem_sr670_firmware	-
lenovo	thinksystem_sr670_v2_firmware	-
lenovo	thinksystem_sr675_v3_firmware	-
lenovo	thinksystem_sr850_v2_firmware	-
lenovo	thinksystem_sr850_v2_firmware	-
lenovo	thinksystem_sr850_v3_firmware	-
lenovo	thinksystem_sr860_v2_firmware	-
lenovo	thinksystem_sr860_v2_firmware	-
lenovo	thinksystem_sr860_v3_firmware	-
lenovo	thinksystem_st250_v2_firmware	-
lenovo	thinksystem_st258_v2_firmware	-
lenovo	thinksystem_st650_v2_firmware	-
lenovo	thinksystem_st650_v3_firmware	-
lenovo	thinksystem_st658_v2_firmware	-
lenovo	thinksystem_st658_v3_firmware	-
lenovo	thinkagile_hx_enclosure_firmware	-
lenovo	thinkagile_hx1021_edg_firmware	-
lenovo	thinkagile_hx1320_firmware	-
lenovo	thinkagile_hx1321_firmware	-
lenovo	thinkagile_hx1520-r_firmware	-
lenovo	thinkagile_hx1521-r_firmware	-
lenovo	thinkagile_hx2320-e_firmware	-
lenovo	thinkagile_hx2321_firmware	-
lenovo	thinkagile_hx2720-e_firmware	-
lenovo	thinkagile_hx3320_firmware	-
lenovo	thinkagile_hx3321_firmware	-
lenovo	thinkagile_hx3520-g_firmware	-
lenovo	thinkagile_hx3521-g_firmware	-
lenovo	thinkagile_hx3720_firmware	-
lenovo	thinkagile_hx3721_firmware	-
lenovo	thinkagile_hx5520_firmware	-
lenovo	thinkagile_hx5520-c_firmware	-
lenovo	thinkagile_hx5521_firmware	-
lenovo	thinkagile_hx5521-c_firmware	-
lenovo	thinkagile_hx7520_firmware	-
lenovo	thinkagile_hx7521_firmware	-
lenovo	thinkagile_hx7820_firmware	-
lenovo	thinkagile_hx7821_firmware	-
lenovo	thinkagile_mx_edge-_mx1020__firmware	-
lenovo	thinkagile_mx630_v3_firmware	-
lenovo	thinkagile_mx630_v3_intergrated_system_firmware	-
lenovo	thinkagile_mx650_v3_firmware	-
lenovo	thinkagile_mx650_v3_intergrated_system_firmware	-
lenovo	thinkagile_mx1021_on_se350_firmware	-
lenovo	thinkagile_mx1021_on_se350_firmware	-
lenovo	thinkagile_vx_1se_firmware	-
lenovo	thinkagile_vx_2u4n_firmware	-
lenovo	thinkagile_vx_4u_firmware	-
lenovo	thinkagile_vx1320_firmware	-
lenovo	thinkagile_vx2320_firmware	-
lenovo	thinkagile_vx3320_firmware	-
lenovo	thinkagile_vx3520-g_firmware	-
lenovo	thinkagile_vx3720_firmware	-
lenovo	thinkagile_vx5520_firmware	-
lenovo	thinkagile_vx7320_n_firmware	-
lenovo	thinkagile_vx7520_firmware	-
lenovo	thinkagile_vx7520_n_firmware	-
lenovo	thinkagile_vx7820_firmware	-
lenovo	thinkedge_se450__firmware	-
lenovo	thinksystem_sd530_firmware	-
lenovo	thinksystem_sd650_dwc_dual_node_tray_firmware	-
lenovo	thinksystem_sd650_dual_node_tray_firmware	-
lenovo	thinksystem_se350_firmware	-
lenovo	thinksystem_se350_firmware	-
lenovo	thinksystem_sn550_firmware	-
lenovo	thinksystem_sn550_firmware	-
lenovo	thinksystem_sn850_firmware	-
lenovo	thinksystem_sn850_firmware	-
lenovo	thinksystem_sr150_firmware	-
lenovo	thinksystem_sr158_firmware	-
lenovo	thinksystem_sr250_firmware	-
lenovo	thinksystem_sr258_firmware	-
lenovo	thinksystem_sr530_firmware	-
lenovo	thinksystem_sr550_firmware	-
lenovo	thinksystem_sr570_firmware	-
lenovo	thinksystem_sr590_firmware	-
lenovo	thinksystem_sr630_firmware	-
lenovo	thinksystem_sr650_firmware	-
lenovo	thinksystem_sr670_firmware	-
lenovo	thinksystem_sr850_firmware	-
lenovo	thinksystem_sr850_firmware	-
lenovo	thinksystem_sr850p_firmware	-
lenovo	thinksystem_sr860_firmware	-
lenovo	thinksystem_sr860_firmware	-
lenovo	thinksystem_sr950_firmware	-
lenovo	thinksystem_st250_firmware	-
lenovo	thinksystem_st258_firmware	-
lenovo	thinksystem_st550_firmware	-

𝑥

= Vulnerable software versions

Common Weakness Enumeration

CWE-269 - Improper Privilege Management
The software does not properly assign, modify, track, or check privileges for an actor, creating an unintended sphere of control for that actor.

References

https://support.lenovo.com/us/en/product_security/LEN-140960