← Database
CVE-2023-0683
HIGH
CVSS: 8.3
Published: 2023-05-01
Modified: 2026-06-17
Description
A valid, authenticated XCC user with read only access may gain elevated privileges through a specifically crafted API call.
Affected Platforms
Lenovo Thinkagile Hx3720Lenovo Thinkagile Mx3331-HLenovo Thinkagile Vx3320 FirmwareLenovo Thinkagile Hx2331Lenovo Thinkagile Vx 1SeLenovo Thinkagile Mx3331-H FirmwareLenovo Thinkagile Vx2330Lenovo Thinkagile Vx7320 NLenovo Thinkagile Vx1320Lenovo Thinkagile Hx5520
Weakness Type
CWE-20, NVD-CWE-noinfo