CVE-2023-25495 : A valid, authenticated administrative user can query a web interface API to reve

A valid, authenticated administrative user can query a web interface API to reveal the configured LDAP client password used by XCC to authenticate to an external LDAP server in certain configurations. There is no exposure where no LDAP client password is configured

Published 2023-04-28 22:15:09

Updated 2023-05-09 20:36:34

Source Lenovo Group Ltd.

View at NVD, CVE.org

Products affected by CVE-2023-25495

Lenovo » Thinkstation P920 Firmware
Versions before (<) 8.88_cdi3a4a
cpe:2.3:o:lenovo:thinkstation_p920_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: Lenovo » Thinkstation P920 » Version: N/A
Lenovo » Thinksystem Sr630 Firmware
Versions before (<) 8.88_cdi3a4a
cpe:2.3:o:lenovo:thinksystem_sr630_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: Lenovo » Thinksystem Sr630 » Version: N/A
Lenovo » Thinkagile Hx5530 Firmware
Versions before (<) 2.93_afbt30p
cpe:2.3:o:lenovo:thinkagile_hx5530_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: Lenovo » Thinkagile Hx5530 » Version: N/A
Lenovo » Thinkagile Vx3331 Firmware
Versions before (<) 2.93_afbt30p
cpe:2.3:o:lenovo:thinkagile_vx3331_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: Lenovo » Thinkagile Vx3331 » Version: N/A
Lenovo » Thinkagile Hx1320 Firmware
Versions before (<) 8.88_cdi3a4a
cpe:2.3:o:lenovo:thinkagile_hx1320_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: Lenovo » Thinkagile Hx1320 » Version: N/A
Lenovo » Thinkagile Hx1321 Firmware
Versions before (<) 8.88_cdi3a4a
cpe:2.3:o:lenovo:thinkagile_hx1321_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: Lenovo » Thinkagile Hx1321 » Version: N/A
Lenovo » Thinkagile Hx1331 Firmware
Versions before (<) 2.93_afbt30p
cpe:2.3:o:lenovo:thinkagile_hx1331_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: Lenovo » Thinkagile Hx1331 » Version: N/A
Lenovo » Thinkagile Hx1520-r Firmware
Versions before (<) 8.88_cdi3a4a
cpe:2.3:o:lenovo:thinkagile_hx1520-r_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: Lenovo » Thinkagile Hx1520-r » Version: N/A
Lenovo » Thinkagile Hx1521-r Firmware
Versions before (<) 8.88_cdi3a4a
cpe:2.3:o:lenovo:thinkagile_hx1521-r_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: Lenovo » Thinkagile Hx1521-r » Version: N/A
Lenovo » Thinkagile Hx2320-e Firmware
Versions before (<) 8.88_cdi3a4a
cpe:2.3:o:lenovo:thinkagile_hx2320-e_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: Lenovo » Thinkagile Hx2320-e » Version: N/A
Lenovo » Thinkagile Hx2321 Firmware
Versions before (<) 8.88_cdi3a4a
cpe:2.3:o:lenovo:thinkagile_hx2321_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: Lenovo » Thinkagile Hx2321 » Version: N/A
Lenovo » Thinkagile Hx2330 Firmware
Versions before (<) 2.93_afbt30p
cpe:2.3:o:lenovo:thinkagile_hx2330_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: Lenovo » Thinkagile Hx2330 » Version: N/A
Lenovo » Thinkagile Hx2330 Firmware » Version: 2.93 Afbt30p
cpe:2.3:o:lenovo:thinkagile_hx2330_firmware:2.93_afbt30p:*:*:*:*:*:*:*
Matching versions
When used together with: Lenovo » Thinkagile Hx2330 » Version: N/A
Lenovo » Thinkagile Hx2331 Firmware
Versions before (<) 2.93_afbt30p
cpe:2.3:o:lenovo:thinkagile_hx2331_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: Lenovo » Thinkagile Hx2331 » Version: N/A
Lenovo » Thinkagile Hx2720-e Firmware
Versions before (<) 3.72_tei388s
cpe:2.3:o:lenovo:thinkagile_hx2720-e_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: Lenovo » Thinkagile Hx2720-e » Version: N/A
Lenovo » Thinkagile Hx3320 Firmware
Versions before (<) 8.88_cdi3a4a
cpe:2.3:o:lenovo:thinkagile_hx3320_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: Lenovo » Thinkagile Hx3320 » Version: N/A
Lenovo » Thinkagile Hx3321 Firmware
Versions before (<) 8.88_cdi3a4a
cpe:2.3:o:lenovo:thinkagile_hx3321_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: Lenovo » Thinkagile Hx3321 » Version: N/A
Lenovo » Thinkagile Hx3330 Firmware
Versions before (<) 2.93_afbt30p
cpe:2.3:o:lenovo:thinkagile_hx3330_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: Lenovo » Thinkagile Hx3330 » Version: N/A
Lenovo » Thinkagile Hx3331 Firmware
Versions before (<) 2.93_afbt30p
cpe:2.3:o:lenovo:thinkagile_hx3331_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: Lenovo » Thinkagile Hx3331 » Version: N/A
Lenovo » Thinkagile Hx3331 Firmware
Versions before (<) 4.71_d8bt48p
cpe:2.3:o:lenovo:thinkagile_hx3331_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: Lenovo » Thinkagile Hx3331 » Version: N/A
Lenovo » Thinkagile Hx3375 Firmware
Versions before (<) 4.71_d8bt48p
cpe:2.3:o:lenovo:thinkagile_hx3375_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: Lenovo » Thinkagile Hx3375 » Version: N/A
Lenovo » Thinkagile Hx3376 Firmware
Versions before (<) 8.88_cdi3a4a
cpe:2.3:o:lenovo:thinkagile_hx3376_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: Lenovo » Thinkagile Hx3376 » Version: N/A
Lenovo » Thinkagile Hx3520-g Firmware
Versions before (<) 8.88_cdi3a4a
cpe:2.3:o:lenovo:thinkagile_hx3520-g_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: Lenovo » Thinkagile Hx3520-g » Version: N/A
Lenovo » Thinkagile Hx3521-g Firmware
Versions before (<) 3.72_tei388s
cpe:2.3:o:lenovo:thinkagile_hx3521-g_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: Lenovo » Thinkagile Hx3521-g » Version: N/A
Lenovo » Thinkagile Hx3720 Firmware
Versions before (<) 3.72_tei388s
cpe:2.3:o:lenovo:thinkagile_hx3720_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: Lenovo » Thinkagile Hx3720 » Version: N/A
Lenovo » Thinkagile Hx3721 Firmware
Versions before (<) 8.88_cdi3a4a
cpe:2.3:o:lenovo:thinkagile_hx3721_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: Lenovo » Thinkagile Hx3721 » Version: N/A
Lenovo » Thinkagile Hx5520 Firmware
Versions before (<) 8.88_cdi3a4a
cpe:2.3:o:lenovo:thinkagile_hx5520_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: Lenovo » Thinkagile Hx5520 » Version: N/A
Lenovo » Thinkagile Hx5520-c Firmware
Versions before (<) 8.88_cdi3a4a
cpe:2.3:o:lenovo:thinkagile_hx5520-c_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: Lenovo » Thinkagile Hx5520-c » Version: N/A
Lenovo » Thinkagile Hx5521 Firmware
Versions before (<) 8.88_cdi3a4a
cpe:2.3:o:lenovo:thinkagile_hx5521_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: Lenovo » Thinkagile Hx5521 » Version: N/A
Lenovo » Thinkagile Hx5521-c Firmware
Versions before (<) 2.93_afbt30p
cpe:2.3:o:lenovo:thinkagile_hx5521-c_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: Lenovo » Thinkagile Hx5521-c » Version: N/A
Lenovo » Thinkagile Hx5531 Firmware
Versions before (<) 8.88_cdi3a4a
cpe:2.3:o:lenovo:thinkagile_hx5531_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: Lenovo » Thinkagile Hx5531 » Version: N/A
Lenovo » Thinkagile Hx7520 Firmware
Versions before (<) 8.88_cdi3a4a
cpe:2.3:o:lenovo:thinkagile_hx7520_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: Lenovo » Thinkagile Hx7520 » Version: N/A
Lenovo » Thinkagile Hx7521 Firmware
Versions before (<) 2.93_afbt30p
cpe:2.3:o:lenovo:thinkagile_hx7521_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: Lenovo » Thinkagile Hx7521 » Version: N/A
Lenovo » Thinkagile Hx7530 Firmware
Versions before (<) 2.93_afbt30p
cpe:2.3:o:lenovo:thinkagile_hx7530_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: Lenovo » Thinkagile Hx7530 » Version: N/A
Lenovo » Thinkagile Hx7531 Firmware
Versions before (<) 2.93_afbt30p
cpe:2.3:o:lenovo:thinkagile_hx7531_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: Lenovo » Thinkagile Hx7531 » Version: N/A
Lenovo » Thinkagile Hx7531 Firmware
Versions before (<) 2.75_psi348s
cpe:2.3:o:lenovo:thinkagile_hx7531_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: Lenovo » Thinkagile Hx7531 » Version: N/A
Lenovo » Thinkagile Hx7820 Firmware
Versions before (<) 2.75_psi348s
cpe:2.3:o:lenovo:thinkagile_hx7820_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: Lenovo » Thinkagile Hx7820 » Version: N/A
Lenovo » Thinkagile Hx7821 Firmware
Versions before (<) 3.72_tei388s
cpe:2.3:o:lenovo:thinkagile_hx7821_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: Lenovo » Thinkagile Hx7821 » Version: N/A
Lenovo » Thinkagile Vx 1se Firmware
Versions before (<) 3.72_tei388s
cpe:2.3:o:lenovo:thinkagile_vx_1se_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: Lenovo » Thinkagile Vx 1se » Version: N/A
Lenovo » Thinkagile Vx 2u4n Firmware
Versions before (<) 3.72_tei388s
cpe:2.3:o:lenovo:thinkagile_vx_2u4n_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: Lenovo » Thinkagile Vx 2u4n » Version: N/A
Lenovo » Thinkagile Vx 4u Firmware
Versions before (<) 2.75_psi348s
cpe:2.3:o:lenovo:thinkagile_vx_4u_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: Lenovo » Thinkagile Vx 4u » Version: N/A
Lenovo » Thinkagile Vx2330 Firmware
Versions before (<) 2.93_afbt30p
cpe:2.3:o:lenovo:thinkagile_vx2330_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: Lenovo » Thinkagile Vx2330 » Version: N/A
Lenovo » Thinkagile Vx3330 Firmware
Versions before (<) 2.93_afbt30p
cpe:2.3:o:lenovo:thinkagile_vx3330_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: Lenovo » Thinkagile Vx3330 » Version: N/A
Lenovo » Thinkagile Vx3530-g Firmware
Versions before (<) 2.93_afbt30p
cpe:2.3:o:lenovo:thinkagile_vx3530-g_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: Lenovo » Thinkagile Vx3530-g » Version: N/A
Lenovo » Thinkagile Vx5530 Firmware
Versions before (<) 2.93_afbt30p
cpe:2.3:o:lenovo:thinkagile_vx5530_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: Lenovo » Thinkagile Vx5530 » Version: N/A
Lenovo » Thinkagile Vx7330 Firmware
Versions before (<) 2.93_afbt30p
cpe:2.3:o:lenovo:thinkagile_vx7330_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: Lenovo » Thinkagile Vx7330 » Version: N/A
Lenovo » Thinkagile Vx7530 Firmware
Versions before (<) 2.93_afbt30p
cpe:2.3:o:lenovo:thinkagile_vx7530_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: Lenovo » Thinkagile Vx7530 » Version: N/A
Lenovo » Thinkagile Vx7531 Firmware
Versions before (<) 2.93_afbt30p
cpe:2.3:o:lenovo:thinkagile_vx7531_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: Lenovo » Thinkagile Vx7531 » Version: N/A
Lenovo » Thinkagile Hx1021 Firmware
Versions before (<) 3.72_tei388s
cpe:2.3:o:lenovo:thinkagile_hx1021_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: Lenovo » Thinkagile Hx1021 » Version: N/A
Lenovo » Thinkagile Mx1020 Firmware
Versions before (<) 2.93_afbt30p
cpe:2.3:o:lenovo:thinkagile_mx1020_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: Lenovo » Thinkagile Mx1020 » Version: N/A
Lenovo » Thinkagile Mx3330-f Firmware
Versions before (<) 2.93_afbt30p
cpe:2.3:o:lenovo:thinkagile_mx3330-f_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: Lenovo » Thinkagile Mx3330-f » Version: N/A
Lenovo » Thinkagile Mx3330-h Firmware
Versions before (<) 2.93_afbt30p
cpe:2.3:o:lenovo:thinkagile_mx3330-h_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: Lenovo » Thinkagile Mx3330-h » Version: N/A
Lenovo » Thinkagile Mx3331-f Firmware
Versions before (<) 2.93_afbt30p
cpe:2.3:o:lenovo:thinkagile_mx3331-f_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: Lenovo » Thinkagile Mx3331-f » Version: N/A
Lenovo » Thinkagile Mx3331-h Firmware
Versions before (<) 2.93_afbt30p
cpe:2.3:o:lenovo:thinkagile_mx3331-h_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: Lenovo » Thinkagile Mx3331-h » Version: N/A
Lenovo » Thinkagile Mx3530 F Firmware
Versions before (<) 2.93_afbt30p
cpe:2.3:o:lenovo:thinkagile_mx3530_f_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: Lenovo » Thinkagile Mx3530 F » Version: N/A
Lenovo » Thinkagile Mx3530-h Firmware
Versions before (<) 2.93_afbt30p
cpe:2.3:o:lenovo:thinkagile_mx3530-h_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: Lenovo » Thinkagile Mx3530-h » Version: N/A
Lenovo » Thinkagile Mx3531 H Firmware
Versions before (<) 2.93_afbt30p
cpe:2.3:o:lenovo:thinkagile_mx3531_h_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: Lenovo » Thinkagile Mx3531 H » Version: N/A
Lenovo » Thinkagile Mx3531-f Firmware
Versions before (<) 3.72_tei388s
cpe:2.3:o:lenovo:thinkagile_mx3531-f_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: Lenovo » Thinkagile Mx3531-f » Version: N/A
Lenovo » Thinkagile Vx1320 Firmware
Versions before (<) 3.72_tei388s
cpe:2.3:o:lenovo:thinkagile_vx1320_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: Lenovo » Thinkagile Vx1320 » Version: N/A
Lenovo » Thinkagile Vx2320 Firmware
Versions before (<) 8.88_cdi3a4a
cpe:2.3:o:lenovo:thinkagile_vx2320_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: Lenovo » Thinkagile Vx2320 » Version: N/A
Lenovo » Thinkagile Vx3320 Firmware
Versions before (<) 8.88_cdi3a4a
cpe:2.3:o:lenovo:thinkagile_vx3320_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: Lenovo » Thinkagile Vx3320 » Version: N/A
Lenovo » Thinkagile Vx3520-g Firmware
Versions before (<) 8.88_cdi3a4a
cpe:2.3:o:lenovo:thinkagile_vx3520-g_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: Lenovo » Thinkagile Vx3520-g » Version: N/A
Lenovo » Thinkagile Vx3720 Firmware
Versions before (<) 3.72_tei388s
cpe:2.3:o:lenovo:thinkagile_vx3720_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: Lenovo » Thinkagile Vx3720 » Version: N/A
Lenovo » Thinkagile Vx5520 Firmware
Versions before (<) 8.88_cdi3a4a
cpe:2.3:o:lenovo:thinkagile_vx5520_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: Lenovo » Thinkagile Vx5520 » Version: N/A
Lenovo » Thinkagile Vx7320 N Firmware
Versions before (<) 8.88_cdi3a4a
cpe:2.3:o:lenovo:thinkagile_vx7320_n_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: Lenovo » Thinkagile Vx7320 N » Version: N/A
Lenovo » Thinkagile Vx7520 Firmware
Versions before (<) 8.88_cdi3a4a
cpe:2.3:o:lenovo:thinkagile_vx7520_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: Lenovo » Thinkagile Vx7520 » Version: N/A
Lenovo » Thinkagile Vx7520 N Firmware
Versions before (<) 8.88_cdi3a4a
cpe:2.3:o:lenovo:thinkagile_vx7520_n_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: Lenovo » Thinkagile Vx7520 N » Version: N/A
Lenovo » Thinkagile Vx7820 Firmware
Versions before (<) 2.75_psi348s
cpe:2.3:o:lenovo:thinkagile_vx7820_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: Lenovo » Thinkagile Vx7820 » Version: N/A
Lenovo » Thinksystem Sd530 Firmware
Versions before (<) 3.72_tei388s
cpe:2.3:o:lenovo:thinksystem_sd530_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: Lenovo » Thinksystem Sd530 » Version: N/A
Lenovo » Thinksystem Sd630 V2 Firmware
Versions before (<) 2.60_tgbt42h
cpe:2.3:o:lenovo:thinksystem_sd630_v2_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: Lenovo » Thinksystem Sd630 V2 » Version: N/A
Lenovo » Thinksystem Sd650 V2 Firmware
Versions before (<) 2.60_tgbt42h
cpe:2.3:o:lenovo:thinksystem_sd650_v2_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: Lenovo » Thinksystem Sd650 V2 » Version: N/A
Lenovo » Thinksystem Sd650-n V2 Firmware
Versions before (<) 2.60_tgbt42h
cpe:2.3:o:lenovo:thinksystem_sd650-n_v2_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: Lenovo » Thinksystem Sd650-n V2 » Version: N/A
Lenovo » Thinksystem Se350 Firmware
Versions before (<) 3.72_tei388s
cpe:2.3:o:lenovo:thinksystem_se350_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: Lenovo » Thinksystem Se350 » Version: N/A
Lenovo » Thinksystem Sn550 Firmware
Versions before (<) 3.72_tei388s
cpe:2.3:o:lenovo:thinksystem_sn550_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: Lenovo » Thinksystem Sn550 » Version: N/A
Lenovo » Thinksystem Sn550 V2 Firmware
Versions before (<) 2.60_tgbt42h
cpe:2.3:o:lenovo:thinksystem_sn550_v2_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: Lenovo » Thinksystem Sn550 V2 » Version: N/A
Lenovo » Thinksystem Sn850 Firmware
Versions before (<) 3.72_tei388s
cpe:2.3:o:lenovo:thinksystem_sn850_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: Lenovo » Thinksystem Sn850 » Version: N/A
Lenovo » Thinksystem Sr150 Firmware
Versions before (<) 3.72_tei388s
cpe:2.3:o:lenovo:thinksystem_sr150_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: Lenovo » Thinksystem Sr150 » Version: N/A
Lenovo » Thinksystem Sr158 Firmware
Versions before (<) 3.72_tei388s
cpe:2.3:o:lenovo:thinksystem_sr158_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: Lenovo » Thinksystem Sr158 » Version: N/A
Lenovo » Thinksystem Sr250 Firmware
Versions before (<) 3.72_tei388s
cpe:2.3:o:lenovo:thinksystem_sr250_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: Lenovo » Thinksystem Sr250 » Version: N/A
Lenovo » Thinksystem Sr250 V2 Firmware
Versions before (<) 2.60_tgbt42h
cpe:2.3:o:lenovo:thinksystem_sr250_v2_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: Lenovo » Thinksystem Sr250 V2 » Version: N/A
Lenovo » Thinksystem Sr258 Firmware
Versions before (<) 3.72_tei388s
cpe:2.3:o:lenovo:thinksystem_sr258_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: Lenovo » Thinksystem Sr258 » Version: N/A
Lenovo » Thinksystem Sr258 V2 Firmware
Versions before (<) 2.60_tgbt42h
cpe:2.3:o:lenovo:thinksystem_sr258_v2_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: Lenovo » Thinksystem Sr258 V2 » Version: N/A
Lenovo » Thinksystem Sr530 Firmware
Versions before (<) 8.88_cdi3a4a
cpe:2.3:o:lenovo:thinksystem_sr530_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: Lenovo » Thinksystem Sr530 » Version: N/A
Lenovo » Thinksystem Sr550 Firmware
Versions before (<) 8.88_cdi3a4a
cpe:2.3:o:lenovo:thinksystem_sr550_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: Lenovo » Thinksystem Sr550 » Version: N/A
Lenovo » Thinksystem Sr570 Firmware
Versions before (<) 8.88_cdi3a4a
cpe:2.3:o:lenovo:thinksystem_sr570_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: Lenovo » Thinksystem Sr570 » Version: N/A
Lenovo » Thinksystem Sr590 Firmware
Versions before (<) 8.88_cdi3a4a
cpe:2.3:o:lenovo:thinksystem_sr590_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: Lenovo » Thinksystem Sr590 » Version: N/A
Lenovo » Thinksystem Sr630 V2 Firmware
Versions before (<) 2.93_afbt30p
cpe:2.3:o:lenovo:thinksystem_sr630_v2_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: Lenovo » Thinksystem Sr630 V2 » Version: N/A
Lenovo » Thinksystem Sr645 Firmware
Versions before (<) 4.71_d8bt48p
cpe:2.3:o:lenovo:thinksystem_sr645_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: Lenovo » Thinksystem Sr645 » Version: N/A
Lenovo » Thinksystem Sr650 Firmware
Versions before (<) 8.88_cdi3a4a
cpe:2.3:o:lenovo:thinksystem_sr650_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: Lenovo » Thinksystem Sr650 » Version: N/A
Lenovo » Thinksystem Sr650 V2 Firmware
Versions before (<) 2.93_afbt30p
cpe:2.3:o:lenovo:thinksystem_sr650_v2_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: Lenovo » Thinksystem Sr650 V2 » Version: N/A
Lenovo » Thinksystem Sr665 Firmware
Versions before (<) 4.71_d8bt48p
cpe:2.3:o:lenovo:thinksystem_sr665_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: Lenovo » Thinksystem Sr665 » Version: N/A
Lenovo » Thinksystem Sr670 Firmware
Versions before (<) 3.72_tei388s
cpe:2.3:o:lenovo:thinksystem_sr670_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: Lenovo » Thinksystem Sr670 » Version: N/A
Lenovo » Thinksystem Sr670 V2 Firmware
Versions before (<) 2.60_tgbt42h
cpe:2.3:o:lenovo:thinksystem_sr670_v2_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: Lenovo » Thinksystem Sr670 V2 » Version: N/A
Lenovo » Thinksystem Sr850 Firmware
Versions before (<) 3.72_tei388s
cpe:2.3:o:lenovo:thinksystem_sr850_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: Lenovo » Thinksystem Sr850 » Version: N/A
Lenovo » Thinksystem Sr850 V2 Firmware
Versions before (<) 2.60_tgbt42h
cpe:2.3:o:lenovo:thinksystem_sr850_v2_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: Lenovo » Thinksystem Sr850 V2 » Version: N/A
Lenovo » Thinksystem Sr850p Firmware
Versions before (<) 3.72_tei388s
cpe:2.3:o:lenovo:thinksystem_sr850p_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: Lenovo » Thinksystem Sr850p » Version: N/A
Lenovo » Thinksystem Sr860 Firmware
Versions before (<) 3.72_tei388s
cpe:2.3:o:lenovo:thinksystem_sr860_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: Lenovo » Thinksystem Sr860 » Version: N/A
Lenovo » Thinksystem Sr860 V2 Firmware
Versions before (<) 2.60_tgbt42h
cpe:2.3:o:lenovo:thinksystem_sr860_v2_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: Lenovo » Thinksystem Sr860 V2 » Version: N/A
Lenovo » Thinksystem Sr950 Firmware
Versions before (<) 2.75_psi348s
cpe:2.3:o:lenovo:thinksystem_sr950_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: Lenovo » Thinksystem Sr950 » Version: N/A
Lenovo » Thinksystem St250 Firmware
Versions before (<) 3.72_tei388s
cpe:2.3:o:lenovo:thinksystem_st250_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: Lenovo » Thinksystem St250 » Version: N/A
Lenovo » Thinksystem St250 V2 Firmware
Versions before (<) 2.60_tgbt42h
cpe:2.3:o:lenovo:thinksystem_st250_v2_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: Lenovo » Thinksystem St250 V2 » Version: N/A
Lenovo » Thinksystem St258 Firmware
Versions before (<) 3.72_tei388s
cpe:2.3:o:lenovo:thinksystem_st258_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: Lenovo » Thinksystem St258 » Version: N/A
Lenovo » Thinksystem St258 V2 Firmware
Versions before (<) 2.60_tgbt42h
cpe:2.3:o:lenovo:thinksystem_st258_v2_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: Lenovo » Thinksystem St258 V2 » Version: N/A
Lenovo » Thinksystem St550 Firmware
Versions before (<) 8.88_cdi3a4a
cpe:2.3:o:lenovo:thinksystem_st550_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: Lenovo » Thinksystem St550 » Version: N/A
Lenovo » Thinksystem St650 V2 Firmware
Versions before (<) 2.60_tgbt42h
cpe:2.3:o:lenovo:thinksystem_st650_v2_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: Lenovo » Thinksystem St650 V2 » Version: N/A
Lenovo » Thinksystem St658 V2 Firmware
Versions before (<) 2.60_tgbt42h
cpe:2.3:o:lenovo:thinksystem_st658_v2_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: Lenovo » Thinksystem St658 V2 » Version: N/A
Lenovo » Thinkagile Hx Enclosure Firmware
Versions before (<) 3.72_tei388s
cpe:2.3:o:lenovo:thinkagile_hx_enclosure_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: Lenovo » Thinkagile Hx Enclosure » Version: N/A
Lenovo » Thinkagile Mx1021 On Se350 Firmware
Versions before (<) 3.72_tei388s
cpe:2.3:o:lenovo:thinkagile_mx1021_on_se350_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: Lenovo » Thinkagile Mx1021 On Se350 » Version: N/A
Lenovo » Thinkedge Se450 Firmware
Versions before (<) 1.60_usx324o
cpe:2.3:o:lenovo:thinkedge_se450__firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: Lenovo » Thinkedge Se450 » Version: N/A
Lenovo » Thinksystem Sd650 Firmware
Versions before (<) 3.72_tei388s
cpe:2.3:o:lenovo:thinksystem_sd650_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: Lenovo » Thinksystem Sd650 » Version: N/A
Lenovo » Thinksystem Sr645 V3 Firmware
Versions before (<) 4.71_d8bt48p
cpe:2.3:o:lenovo:thinksystem_sr645_v3_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: Lenovo » Thinksystem Sr645 V3 » Version: N/A
Lenovo » Thinksystem Sr665 V3 Firmware
Versions before (<) 4.71_d8bt48p
cpe:2.3:o:lenovo:thinksystem_sr665_v3_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: Lenovo » Thinksystem Sr665 V3 » Version: N/A

Exploit prediction scoring system (EPSS) score for CVE-2023-25495

EPSS FAQ

0.06%

Probability of exploitation activity in the next 30 days EPSS Score History

~ 26 %

Percentile, the proportion of vulnerabilities that are scored at or less

CVSS scores for CVE-2023-25495

Base Score	Base Severity	CVSS Vector	Exploitability Score	Impact Score	Score Source
4.9	MEDIUM	CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N	1.2	3.6	NIST
Attack Vector: Network Attack Complexity: Low Privileges Required: High User Interaction: None Scope: Unchanged Confidentiality: High Integrity: None Availability: None
4.9	MEDIUM	CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N	1.2	3.6	Lenovo Group Ltd.
Attack Vector: Network Attack Complexity: Low Privileges Required: High User Interaction: None Scope: Unchanged Confidentiality: High Integrity: None Availability: None

CWE ids for CVE-2023-25495

CWE-522 Insufficiently Protected Credentials

The product transmits or stores authentication credentials, but it uses an insecure method that is susceptible to unauthorized interception and/or retrieval.
Assigned by:
- nvd@nist.gov (Primary)
- psirt@lenovo.com (Secondary)

References for CVE-2023-25495

https://support.lenovo.com/us/en/product_security/LEN-99936

Lenovo XClarity Controller (XCC) Vulnerabilities - Lenovo Support US
Vendor Advisory

CVEs referencing this url

Jump to

Vulnerability Details : CVE-2023-25495

Products affected by CVE-2023-25495

Exploit prediction scoring system (EPSS) score for CVE-2023-25495

CVSS scores for CVE-2023-25495

CWE ids for CVE-2023-25495

References for CVE-2023-25495