CVE-2021-3956 : A read-only authentication bypass vulnerability was reported in the Third Quarte

A read-only authentication bypass vulnerability was reported in the Third Quarter 2021 release of Lenovo XClarity Controller (XCC) firmware affecting XCC devices configured in LDAP Authentication Only Mode and using an LDAP server that supports “unauthenticated bind”, such as Microsoft Active Directory. An unauthenticated user can gain read-only access to XCC in such a configuration, thereby allowing the XCC device configuration to be viewed but not changed. XCC devices configured to use local authentication, LDAP Authentication + Authorization Mode, or LDAP servers that support only “authenticated bind” and/or “anonymous bind” are not affected.

Published 2022-05-18 16:15:08

Updated 2022-06-06 18:28:15

Source Lenovo Group Ltd.

View at NVD, CVE.org

Products affected by CVE-2021-3956

Lenovo » Xclarity Controller
Versions before (<) 7.22_cdi382o
cpe:2.3:a:lenovo:xclarity_controller:*:*:*:*:*:*:*:*
Matching versions
When used together with: Lenovo » Thinkagile Hx1320 » Version: N/A
When used together with: Lenovo » Thinkagile Hx1321 » Version: N/A
When used together with: Lenovo » Thinkagile Hx1520-r » Version: N/A
When used together with: Lenovo » Thinkagile Hx1521-r » Version: N/A
When used together with: Lenovo » Thinkagile Hx2320-e » Version: N/A
When used together with: Lenovo » Thinkagile Hx2321 » Version: N/A
When used together with: Lenovo » Thinkagile Hx3320 » Version: N/A
When used together with: Lenovo » Thinkagile Hx3321 » Version: N/A
When used together with: Lenovo » Thinkagile Hx3375 » Version: N/A
When used together with: Lenovo » Thinkagile Hx3376 » Version: N/A
When used together with: Lenovo » Thinkagile Hx3520-g » Version: N/A
When used together with: Lenovo » Thinkagile Hx3521-g » Version: N/A
When used together with: Lenovo » Thinkagile Hx5520 » Version: N/A
When used together with: Lenovo » Thinkagile Hx5520-c » Version: N/A
When used together with: Lenovo » Thinkagile Hx5521 » Version: N/A
When used together with: Lenovo » Thinkagile Hx5521-c » Version: N/A
When used together with: Lenovo » Thinkagile Hx7520 » Version: N/A
When used together with: Lenovo » Thinkagile Hx7521 » Version: N/A
When used together with: Lenovo » Thinkagile Vx2320 » Version: N/A
When used together with: Lenovo » Thinkagile Vx3320 » Version: N/A
When used together with: Lenovo » Thinkagile Vx3520-g » Version: N/A
When used together with: Lenovo » Thinkagile Vx5520 » Version: N/A
When used together with: Lenovo » Thinkagile Vx7320 N » Version: N/A
When used together with: Lenovo » Thinkagile Vx7520 » Version: N/A
When used together with: Lenovo » Thinkagile Vx7520 N » Version: N/A
When used together with: Lenovo » Thinkstation P920 » Version: N/A
When used together with: Lenovo » Thinksystem Sr530 » Version: N/A
When used together with: Lenovo » Thinksystem Sr550 » Version: N/A
When used together with: Lenovo » Thinksystem Sr570 » Version: N/A
When used together with: Lenovo » Thinksystem Sr590 » Version: N/A
When used together with: Lenovo » Thinksystem Sr630 » Version: N/A
When used together with: Lenovo » Thinksystem Sr645 » Version: N/A
When used together with: Lenovo » Thinksystem Sr650 » Version: N/A
When used together with: Lenovo » Thinksystem Sr665 » Version: N/A
When used together with: Lenovo » Thinksystem St550 » Version: N/A
Lenovo » Xclarity Controller
Versions before (<) 3.41_tei382m
cpe:2.3:a:lenovo:xclarity_controller:*:*:*:*:*:*:*:*
Matching versions
When used together with: Lenovo » Thinkagile Mx1021 » Version: N/A
When used together with: Lenovo » Thinksystem Se350 » Version: N/A
Lenovo » Xclarity Controller
Versions before (<) 2.32_psi342n
cpe:2.3:a:lenovo:xclarity_controller:*:*:*:*:*:*:*:*
Matching versions
When used together with: Lenovo » Thinkagile Hx7820 » Version: N/A
When used together with: Lenovo » Thinkagile Hx7821 » Version: N/A
When used together with: Lenovo » Thinksystem Sr950 » Version: N/A
Lenovo » Xclarity Controller
Versions before (<) 4.83_tei3c0n
cpe:2.3:a:lenovo:xclarity_controller:*:*:*:*:*:*:*:*
Matching versions
When used together with: Lenovo » Thinksystem Sd650 » Version: N/A
When used together with: Lenovo » Thinksystem Sn550 » Version: N/A
When used together with: Lenovo » Thinksystem Sn850 » Version: N/A
When used together with: Lenovo » Thinksystem Sr850 » Version: N/A
When used together with: Lenovo » Thinksystem Sr860 » Version: N/A
Lenovo » Xclarity Controller
Versions before (<) 1.51_tgbt24l
cpe:2.3:a:lenovo:xclarity_controller:*:*:*:*:*:*:*:*
Matching versions
When used together with: Lenovo » Thinksystem Sr850 » Version: 2.0
When used together with: Lenovo » Thinksystem Sr860 » Version: 2.0

Exploit prediction scoring system (EPSS) score for CVE-2021-3956

EPSS FAQ

0.07%

Probability of exploitation activity in the next 30 days EPSS Score History

~ 31 %

Percentile, the proportion of vulnerabilities that are scored at or less

CVSS scores for CVE-2021-3956

Base Score	Base Severity	CVSS Vector	Exploitability Score	Impact Score	Score Source
4.3	MEDIUM	AV:N/AC:M/Au:N/C:P/I:N/A:N	8.6	2.9	NIST
Access Vector: Network Access Complexity: Medium Authentication: None Confidentiality Impact: Partial Integrity Impact: None Availability Impact: None
5.3	MEDIUM	CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N	3.9	1.4	NIST
Attack Vector: Network Attack Complexity: Low Privileges Required: None User Interaction: None Scope: Unchanged Confidentiality: Low Integrity: None Availability: None
4.3	MEDIUM	CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N	2.8	1.4	Lenovo Group Ltd.
Attack Vector: Adjacent Network Attack Complexity: Low Privileges Required: None User Interaction: None Scope: Unchanged Confidentiality: Low Integrity: None Availability: None

CWE ids for CVE-2021-3956

CWE-863 Incorrect Authorization

The product performs an authorization check when an actor attempts to access a resource or perform an action, but it does not correctly perform the check.
Assigned by:
- nvd@nist.gov (Primary)
- psirt@lenovo.com (Secondary)

References for CVE-2021-3956

https://support.lenovo.com/us/en/product_security/LEN-72074

Read-Only LDAP Authentication Bypass Vulnerability in Lenovo XClarity Controller (XCC) Firmware - Lenovo Support NL
Vendor Advisory

Jump to

Vulnerability Details : CVE-2021-3956

Products affected by CVE-2021-3956

Exploit prediction scoring system (EPSS) score for CVE-2021-3956

CVSS scores for CVE-2021-3956

CWE ids for CVE-2021-3956

References for CVE-2021-3956