← Database
CVE-2023-25492
MEDIUM
CVSS: 6.3
Published: 2023-05-01
Modified: 2026-06-17
Description
A valid, authenticated user may be able to trigger a denial of service of the XCC web user interface or other undefined behavior through a format string injection vulnerability in a web interface API.
Affected Platforms
Lenovo Thinkagile Hx3720Lenovo Thinkagile Mx3331-HLenovo Thinkagile Vx3320 FirmwareLenovo Thinkagile Hx2331Lenovo Thinkagile Vx 1SeLenovo Thinkagile Mx3331-H FirmwareLenovo Thinkagile Vx2330Lenovo Thinkagile Vx7320 NLenovo Thinkagile Vx1320Lenovo Thinkagile Hx5520
Weakness Type
CWE-134, CWE-134