CVE-2024-8059
IPMI credentials may be captured in XCC audit log entries when the account username length is 16 characters.
- Published
- Updated
- Reserved
- Assigned by
- lenovo
Description
IPMI credentials may be captured in XCC audit log entries when the account username length is 16 characters.
Scores
| Scored by | CVSS | Score | Vector |
|---|---|---|---|
| lenovoCNA (assigner) | 3.1 | Medium4.3 | CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N |
| NVDNVD · Deferred | 3.1 | Medium4.3 | CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N |
- EPSS (exploitation in 30 days)
- 0.19% · top 91% of all CVEs (7 Nov 2026)
- CISA SSVC
- Exploitation: none · Automatable: no · Technical impact: partial
The list uses the assigner's score when there is one, then CISA's, then NVD's: Medium 4.3.
Weakness
Affected products
Lenovo · HX5530 Appliance (ThinkAgile) XCC
- affected < 5.10 AFBT50F
Lenovo · HX7530 Appliance (ThinkAgile) XCC
- affected < 5.10 AFBT50F
Lenovo · ST250 V3 (ThinkSystem) XCC
- affected < 3.10 CTX318G
Lenovo · VX3331 Certified Node (ThinkAgile) XCC
- affected < 5.10 AFBT50F
Lenovo · HX Enclosure Certified Node (ThinkAgile) XCC
- affected < 6.40 TEI3F3E
Lenovo · HX1021 Edge Certified Node 3yr (ThinkAgile) XCC
- affected < 4.12 TEI3E4D
Lenovo · HX1320 Appliance (ThinkAgile) XCC
- affected < 9.98 CDI3B4E
Lenovo · HX1321 Certified Node (ThinkAgile) XCC
- affected < 9.98 CDI3B4E
Lenovo · HX1331 Certified Node (ThinkAgile) XCC
- affected < 5.10 AFBT50F
Lenovo · HX1520-R Appliance (ThinkAgile) XCC
- affected < 9.98 CDI3B4E
Lenovo · HX1521-R Certified Node (ThinkAgile) XCC
- affected < 9.98 CDI3B4E
Lenovo · HX2320-E Appliance (ThinkAgile) XCC
- affected < 9.98 CDI3B4E
Lenovo · HX2321 Certified Node (ThinkAgile) XCC
- affected < 9.98 CDI3B4E
Lenovo · HX2330 Appliance (ThinkAgile) XCC
- affected < 5.10 AFBT50F
Lenovo · HX2331 Certified Node (ThinkAgile) XCC
- affected < 5.10 AFBT50F
Lenovo · HX2720-E Appliance (ThinkAgile) XCC
- affected < 6.40 TEI3F3E
Lenovo · HX3320 Appliance (ThinkAgile) XCC
- affected < 9.98 CDI3B4E
Lenovo · HX3321 Certified Node (ThinkAgile) XCC
- affected < 9.98 CDI3B4E
Lenovo · HX3330 Appliance (ThinkAgile) XCC
- affected < 5.10 AFBT50F
Lenovo · HX3331 Certified Node (ThinkAgile) XCC
- affected < 5.10 AFBT50F
Lenovo · HX3331 Node SAP HANA (ThinkAgile) XCC
- affected < 5.10 AFBT50F
Lenovo · HX3375 Appliance (ThinkAgile) XCC
- affected < 5.80 D8BT66D
Lenovo · HX3376 Certified Node (ThinkAgile) XCC
- affected < 5.80 D8BT66D
Lenovo · HX3520-G Appliance (ThinkAgile) XCC
- affected < 9.98 CDI3B4E
Lenovo · HX3521-G Certified Node (ThinkAgile) XCC
- affected < 9.98 CDI3B4E
Lenovo · HX3720 Appliance (ThinkAgile) XCC
- affected < 6.40 TEI3F3E
Lenovo · HX3721 Certified Node (ThinkAgile) XCC
- affected < 6.40 TEI3F3E
Lenovo · HX5520 Appliance (ThinkAgile) XCC
- affected < 9.98 CDI3B4E
Lenovo · HX5520-C Appliance (ThinkAgile) XCC
- affected < 9.98 CDI3B4E
Lenovo · HX5521 Certified Node (ThinkAgile) XCC
- affected < 9.98 CDI3B4E
Lenovo · HX5521-C Certified Node (ThinkAgile) XCC
- affected < 9.98 CDI3B4E
Lenovo · HX5531 Certified Node (ThinkAgile) XCC
- affected < 5.10 AFBT50F
Lenovo · HX7520 Appliance (ThinkAgile) XCC
- affected < 9.98 CDI3B4E
Lenovo · HX7521 Certified Node (ThinkAgile) XCC
- affected < 9.98 CDI3B4E
Lenovo · HX7530 Appl for SAP HANA (ThinkAgile) XCC
- affected < 5.10 AFBT50F
Lenovo · HX7531 Certified Node (ThinkAgile) XCC
- affected < 5.10 AFBT50F
Lenovo · HX7531 Node SAP HANA (ThinkAgile) XCC
- affected < 5.10 AFBT50F
Lenovo · HX7820 Appliance (ThinkAgile) XCC
- affected < 3.20 PSI356B
Lenovo · HX7821 Certified Node (ThinkAgile) XCC
- affected < 3.20 PSI356B
Lenovo · MX Edge Appliance - MX1020 (ThinkAgile) XCC
- affected < 4.12 TEI3E4D
Lenovo · MX3330-F All-flash Appliance (ThinkAgile) XCC
- affected < 5.10 AFBT50F
Lenovo · MX3330-H Hybrid Appliance (ThinkAgile) XCC
- affected < 5.10 AFBT50F
Lenovo · MX3331-F All-flash Certified node (ThinkAgile) XCC
- affected < 5.10 AFBT50F
Lenovo · MX3331-H Hybrid Certified node (ThinkAgile) XCC
- affected < 5.10 AFBT50F
Lenovo · MX3530 F All flash Appliance (ThinkAgile) XCC
- affected < 5.10 AFBT50F
Lenovo · MX3530-H Hybrid Appliance (ThinkAgile) XCC
- affected < 5.10 AFBT50F
Lenovo · MX3531 H Hybrid Certified node (ThinkAgile) XCC
- affected < 5.10 AFBT50F
Lenovo · MX3531-F All-flash Certified node (ThinkAgile) XCC
- affected < 5.10 AFBT50F
Lenovo · P920 Rack Workstation (ThinkStation) XCC
- affected < 9.98 CDI3B4E
Lenovo · SD530 (ThinkSystem) XCC
- affected < 6.40 TEI3F3E
Lenovo · SD530 V3 (ThinkSystem) XCC
- affected < 1.20 USX364F
Lenovo · SD550 V3 (ThinkSystem) XCC
- affected < 1.20 USX364F
Lenovo · SD630 V2 (ThinkSystem) XCC
- affected < 4.12 TGBT52D
Lenovo · SD650 DWC Dual Node Tray (ThinkSystem) XCC
- affected < 6.40 TEI3F3E
Lenovo · SD650 V2 (ThinkSystem) XCC
- affected < 4.12 TGBT52D
Lenovo · SD650 V3 (ThinkSystem) XCC
- affected < 7.10 USX358F
Lenovo · SD650-N V2 (ThinkSystem) XCC
- affected < 4.12 TGBT52D
Lenovo · SD665 V3 (ThinkSystem) XCC
- affected < 7.10 QGX344G
Lenovo · SE350 (ThinkSystem) XCC
- affected < 4.12 TEI3E4D
Lenovo · SE350 V2 (ThinkEdge) XCC
- affected < 4.10 IYX330J
Lenovo · SE360 V2 (ThinkEdge) XCC
- affected < 4.10 IYX330J
Lenovo · SE450 (ThinkEdge) XCC
- affected < 4.10 USX360F
Lenovo · SE455 V3 (ThinkEdge) XCC
- affected < 4.10 MBX312K
Lenovo · SN550 (ThinkSystem) XCC
- affected < 6.40 TEI3F3E
Lenovo · SN550 V2 (ThinkSystem) XCC
- affected < 4.12 TGBT52D
Lenovo · SN850 (ThinkSystem) XCC
- affected < 6.40 TEI3F3E
Lenovo · SR150 (ThinkSystem) XCC
- affected < 6.40 TEI3F3E
Lenovo · SR158 (ThinkSystem) XCC
- affected < 6.40 TEI3F3E
Lenovo · SR250 (ThinkSystem) XCC
- affected < 6.40 TEI3F3E
Lenovo · SR250 V2 (ThinkSystem) XCC
- affected < 4.12 TGBT52D
Lenovo · SR250 V3 (ThinkSystem) XCC
- affected < 3.10 CTX318G
Lenovo · SR258 (ThinkSystem) XCC
- affected < 6.40 TEI3F3E
Lenovo · SR258 V2 (ThinkSystem) XCC
- affected < 4.12 TGBT52D
Lenovo · SR258 V3 (ThinkSystem) XCC
- affected < 3.10 CTX318G
Lenovo · SR530 (ThinkSystem) XCC
- affected < 9.98 CDI3B4E
Lenovo · SR550 (ThinkSystem) XCC
- affected < 9.98 CDI3B4E
Lenovo · SR570 (ThinkSystem) XCC
- affected < 9.98 CDI3B4E
Lenovo · SR590 (ThinkSystem) XCC
- affected < 9.98 CDI3B4E
Lenovo · SR630 (ThinkSystem) XCC
- affected < 9.98 CDI3B4E
Lenovo · SR630 V2 (ThinkSystem) XCC
- affected < 5.10 AFBT50F
Lenovo · SR630 V3 (ThinkSystem) XCC
- affected < 5.50 ESX334M
Lenovo · SR635 V3 (ThinkSystem) XCC
- affected < 3.50 KAX334N
Lenovo · SR645 (ThinkSystem) XCC
- affected < 5.80 D8BT66D
Lenovo · SR645 V3 (ThinkSystem) XCC
- affected < 3.50 KAX334N
Lenovo · SR650 (ThinkSystem) XCC
- affected < 9.98 CDI3B4E
Lenovo · SR650 V2 (ThinkSystem) XCC
- affected < 5.10 AFBT50F
Lenovo · SR650 V3 (ThinkSystem) XCC
- affected < 5.50 ESX334M
Lenovo · SR655 V3 (ThinkSystem) XCC
- affected < 3.50 KAX334N
Lenovo · SR665 (ThinkSystem) XCC
- affected < 5.80 D8BT66D
Lenovo · SR665 V3 (ThinkSystem) XCC
- affected < 3.50 KAX334N
Lenovo · SR670 (ThinkSystem) XCC
- affected < 4.12 TEI3E4D
Lenovo · SR670 V2 (ThinkSystem) XCC
- affected < 4.12 TGBT52D
Lenovo · SR675 V3 (ThinkSystem) XCC
- affected < 7.10 QGX344G
Lenovo · SR850 (ThinkSystem) XCC
- affected < 6.40 TEI3F3E
Lenovo · SR850 V2 (ThinkSystem) XCC
- affected < 4.12 TGBT52D
Lenovo · SR850 V3 (ThinkSystem) XCC
- affected < 5.10 RSX314G
Lenovo · SR850P (ThinkSystem) XCC
- affected < 4.12 TEI3E4D
Lenovo · SR860 (ThinkSystem) XCC
- affected < 6.40 TEI3F3E
Lenovo · SR860 V2 (ThinkSystem) XCC
- affected < 4.12 TGBT52D
Lenovo · SR860 V3 (ThinkSystem) XCC
- affected < 5.10 RSX314G
Lenovo · SR950 (ThinkSystem) XCC
- affected < 3.20 PSI356B
Lenovo · SR950 V3 (ThinkSystem) XCC
- affected < 4.10 EBX310F
Lenovo · ST250 (ThinkSystem) XCC
- affected < 6.40 TEI3F3E
Lenovo · ST250 V2 (ThinkSystem) XCC
- affected < 4.12 TGBT52D
Lenovo · ST258 (ThinkSystem) XCC
- affected < 6.40 TEI3F3E
Lenovo · ST258 V2 (ThinkSystem) XCC
- affected < 4.12 TGBT52D
Lenovo · ST258 V3 (ThinkSystem) XCC
- affected < 3.10 CTX318G
Lenovo · ST550 (ThinkSystem) XCC
- affected < 9.98 CDI3B4E
Lenovo · ST650 V2 (ThinkSystem) XCC
- affected < 4.12 TGBT52D
Lenovo · ST650 V3 (ThinkSystem) XCC
- affected < 7.10 USX358F
Lenovo · ST658 V2 (ThinkSystem) XCC
- affected < 4.12 TGBT52D
Lenovo · ST658 V3 (ThinkSystem) XCC
- affected < 7.10 USX358F
Lenovo · ThinkAgile MX1021 on SE350 XCC
- affected < 4.12 TEI3E4D
Lenovo · VX 1SE Certified Node (ThinkAgile) XCC
- affected < 6.40 TEI3F3E
Lenovo · VX 2U4N Certified Node (ThinkAgile) XCC
- affected < 6.40 TEI3F3E
Lenovo · VX 4U Certified Node (ThinkAgile) XCC
- affected < 3.20 PSI356B
Lenovo · VX1320 (ThinkAgile) XCC
- affected < 6.40 TEI3F3E
Lenovo · VX2320 (ThinkAgile) XCC
- affected < 9.98 CDI3B4E
Lenovo · VX2330 Appliance (ThinkAgile) XCC
- affected < 5.10 AFBT50F
Lenovo · VX3320 (ThinkAgile) XCC
- affected < 9.98 CDI3B4E
Lenovo · VX3330 Appliance (ThinkAgile) XCC
- affected < 5.10 AFBT50F
Lenovo · VX3520-G (ThinkAgile) XCC
- affected < 9.98 CDI3B4E
Lenovo · VX3530-G Appliance (ThinkAgile) XCC
- affected < 5.10 AFBT50F
Lenovo · VX3720 (ThinkAgile) XCC
- affected < 6.40 TEI3F3E
Lenovo · VX5520 (ThinkAgile) XCC
- affected < 9.98 CDI3B4E
Lenovo · VX5530 Appliance (ThinkAgile) XCC
- affected < 5.10 AFBT50F
Lenovo · VX635 V3 Integrated System (ThinkAgile) XCC
- affected < 3.50 KAX334N
Lenovo · VX645 V3 Certified Node (ThinkAgile) XCC
- affected < 3.50 KAX334N
Lenovo · VX645 V3 Integrated System (ThinkAgile) XCC
- affected < 3.50 KAX334N
Lenovo · VX655 V3 Certified Node (ThinkAgile) XCC
- affected < 3.50 KAX334N
Lenovo · VX655 V3 Integrated System (ThinkAgile) XCC
- affected < 3.50 KAX334N
Lenovo · VX665 V3 Certified Node (ThinkAgile) XCC
- affected < 3.50 KAX334N
Lenovo · VX665 V3 Integrated System (ThinkAgile) XCC
- affected < 3.50 KAX334N
Lenovo · VX7320 N (ThinkAgile) XCC
- affected < 9.98 CDI3B4E
Lenovo · VX7330 Appliance (Thinkagile) XCC
- affected < 5.10 AFBT50F
Lenovo · VX7520 (ThinkAgile) XCC
- affected < 9.98 CDI3B4E
Lenovo · VX7520 N (ThinkAgile) XCC
- affected < 9.98 CDI3B4E
Lenovo · VX7530 Appliance (ThinkAgile) XCC
- affected < 5.10 AFBT50F
Lenovo · VX7531 Certified Node (ThinkAgile) XCC
- affected < 5.10 AFBT50F
Lenovo · VX7820 (ThinkAgile) XCC
- affected < 3.20 PSI356B
What to do
Solution: Update XClarity Controller to the version (or newer) indicated for your model in the advisory: https://support.lenovo.com/us/en/product_security/LEN-172051
References (1)
Sources
The same CVE in the primary databases and aggregators, to check against.
- CVE.org record (opens in a new tab)
- CVE List JSON (GitHub) (opens in a new tab)
- NVD (opens in a new tab)
- FIRST EPSS (opens in a new tab)
- OSV.dev (opens in a new tab)
- GitHub Advisories (opens in a new tab)
- CIRCL Vulnerability-Lookup (opens in a new tab)
Badge for a README or a ticket
[](https://trackcve.app/cve/CVE-2024-8059)Record last updated .