Permissions, Privileges, and Access Controls in Lenovo products - CVE-2023-4607

Vulnerability identifier: #VU80746

CSH Severity: Medium

CVSS v4: 5.3 [CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:N/VI:L/VA:L/SC:N/SI:N/SA:N]

CVE-ID: CVE-2023-4607

CWE-ID: CWE-264

Exploitation vector: Remote access

Exploit availability: No public exploit available

The vulnerability allows a local user to bypass implemented security restrictions.

The vulnerability exists due to improperly imposed security restrictions. A local authenticated Lenovo XClarity Controller (XCC) user can change permissions for any user through a crafted API command.

ThinkSystem SR675 V3
ThinkSystem SR860 V3
ThinkSystem SR850 V3
ThinkEdge SE450
ThinkSystem SR655 V3
ThinkSystem SD665 V3
ThinkSystem SR635 V3
ThinkSystem SR645 V3
ThinkSystem SR665 V3
ThinkSystem SD650 V3
ThinkAgile MX650 V3 Certified Node
ThinkSystem SR630 V3
ThinkSystem SR650 V3
ThinkAgile MX650 v3 Integrated System
ThinkAgile MX630 V3 Certified Node
ThinkAgile MX630 V3 Integrated System
ThinkSystem ST650 V3
ThinkSystem ST658 V3
ThinkAgile MX3531-F All-flash Certified node
ThinkAgile MX3530-H Hybrid Appliance
ThinkAgile VX2330 Appliance
ThinkAgile MX3531 H Hybrid Certified node
ThinkAgile VX3330 Appliance
ThinkAgile VX3530-G Appliance
ThinkAgile VX5530 Appliance
Thinkagile VX7330 Appliance
ThinkAgile HX7530 Appliance
ThinkAgile VX7530 Appliance
ThinkAgile VX7531 Certified Node
ThinkSystem SD630 V2
ThinkSystem SD650 V2
ThinkSystem SD650-N V2
ThinkSystem SN550 V2
ThinkSystem SR250 V2
ThinkSystem SR258 V2
ThinkSystem SR630 V2
ThinkSystem SR650 V2
ThinkSystem SR670 V2
ThinkSystem SR850 V2
ThinkSystem SR860 V2
ThinkSystem ST250 V2
ThinkSystem ST258 V2
ThinkSystem ST650 V2
ThinkSystem ST658 V2
ThinkAgile MX3331-H Hybrid Certified node
ThinkAgile HX5530 Appliance
ThinkAgile VX3331 Certified Node
ThinkAgile HX1331 Certified Node
ThinkAgile HX2330 Appliance
ThinkAgile HX2331 Certified Node
ThinkAgile HX3330 Appliance
ThinkAgile HX3331 Certified Node
ThinkAgile HX3331 Node SAP HANA
ThinkAgile HX5531 Certified Node
ThinkAgile HX7530 Appl for SAP HANA
ThinkAgile HX7531 Certified Node
ThinkAgile HX7531 Node SAP HANA
ThinkAgile MX3530 F All flash Appliance
ThinkAgile MX3330-H Hybrid Appliance
ThinkAgile MX3330-F All-flash Appliance
ThinkAgile MX3331-F All-flash Certified node
ThinkAgile HX7821 Certified Node
ThinkAgile VX 4U Certified Node
ThinkAgile HX7820 Appliance
ThinkSystem SR950
ThinkAgile VX7820
ThinkAgile MX Edge Appliance - MX1020
ThinkSystem SE350
ThinkSystem SR850P
ThinkSystem SR670
ThinkAgile MX1021 on SE350
ThinkAgile HX1021 Edge Certified Node 3yr
ThinkAgile HX3375 Appliance
ThinkSystem SR645
ThinkAgile HX3376 Certified Node
ThinkSystem SR665
ThinkAgile VX 1SE Certified Node
ThinkAgile HX2720-E Appliance
ThinkSystem SR850
ThinkSystem SR258
ThinkSystem SR250
ThinkSystem SR158
ThinkSystem SR150
ThinkSystem SN850
ThinkSystem SN550
ThinkAgile HX Enclosure Certified Node
ThinkAgile VX1320
ThinkAgile VX3720
ThinkSystem ST258
ThinkSystem ST250
ThinkAgile VX 2U4N Certified Node
ThinkSystem SD530
ThinkSystem SD650 DWC Dual Node Tray
ThinkSystem SR860
ThinkAgile HX3721 Certified Node
ThinkAgile HX3720 Appliance
ThinkAgile HX1520-R Appliance
ThinkAgile HX2321 Certified Node
ThinkAgile HX1321 Certified Node
ThinkAgile HX2320-E Appliance
ThinkAgile HX1320 Appliance
ThinkSystem ST550
ThinkAgile HX1521-R Certified Node
ThinkSystem SR550
ThinkAgile HX5521 Certified Node
ThinkAgile VX3320
ThinkAgile VX2320
ThinkAgile VX3520-G
ThinkAgile VX5520
ThinkAgile VX7320 N
ThinkAgile HX7521 Certified Node
ThinkAgile VX7520
ThinkAgile VX7520 N
ThinkAgile HX7520 Appliance
ThinkAgile HX5521-C Certified Node
ThinkStation P920 Rack Workstation
ThinkAgile HX3320 Appliance
ThinkAgile HX5520-C Appliance
ThinkAgile HX5520 Appliance
ThinkAgile HX3521-G Certified Node
ThinkAgile HX3520-G Appliance
ThinkSystem SR530
ThinkSystem SR570
ThinkSystem SR590
ThinkSystem SR630
ThinkSystem SR650
ThinkAgile HX3321 Certified Node
IBM Cloud Pak System

Install updates from vendor's website.

ThinkSystem SR675 V3 - update to 1.11 QGX318C
ThinkSystem SR860 V3 - update to 1.11 RSX306C
ThinkSystem SR850 V3 - update to 1.11 RSX306C
ThinkEdge SE450 - update to 1.70 USX326L
ThinkSystem SR655 V3 - update to 2.12 KAX318V
ThinkSystem SD665 V3 - update to 2.12 KAX318V
ThinkSystem SR635 V3 - update to 2.12 KAX318V
ThinkSystem SR645 V3 - update to 2.12 KAX318V
ThinkSystem SR665 V3 - update to 2.12 KAX318V
ThinkSystem SD650 V3 - update to 2.12 USX320Y
ThinkAgile MX650 V3 Certified Node - update to 2.14 ESE114R
ThinkSystem SR630 V3 - update to 2.14 ESE114R
ThinkSystem SR650 V3 - update to 2.14 ESE114R
ThinkAgile MX650 v3 Integrated System - update to 2.14 ESE114R
ThinkAgile MX630 V3 Certified Node - update to 2.14 ESE114R
ThinkAgile MX630 V3 Integrated System - update to 2.14 ESE114R
ThinkSystem ST650 V3 - update to 2.17 USX330E
ThinkSystem ST658 V3 - update to 2.17 USX330E
ThinkAgile MX3531-F All-flash Certified node - update to 2.85 TGBT44N
ThinkAgile MX3530-H Hybrid Appliance - update to 2.85 TGBT44N
ThinkAgile VX2330 Appliance - update to 2.85 TGBT44N
ThinkAgile MX3531 H Hybrid Certified node - update to 2.85 TGBT44N
ThinkAgile VX3330 Appliance - update to 2.85 TGBT44N
ThinkAgile VX3530-G Appliance - update to 2.85 TGBT44N
ThinkAgile VX5530 Appliance - update to 2.85 TGBT44N
Thinkagile VX7330 Appliance - update to 2.85 TGBT44N
ThinkAgile HX7530 Appliance - update to 2.85 TGBT44N
ThinkAgile VX7530 Appliance - update to 2.85 TGBT44N
ThinkAgile VX7531 Certified Node - update to 2.85 TGBT44N
ThinkSystem SD630 V2 - update to 2.85 TGBT44N
ThinkSystem SD650 V2 - update to 2.85 TGBT44N
ThinkSystem SD650-N V2 - update to 2.85 TGBT44N
ThinkSystem SN550 V2 - update to 2.85 TGBT44N
ThinkSystem SR250 V2 - update to 2.85 TGBT44N
ThinkSystem SR258 V2 - update to 2.85 TGBT44N
ThinkSystem SR630 V2 - update to 2.85 TGBT44N
ThinkSystem SR650 V2 - update to 2.85 TGBT44N
ThinkSystem SR670 V2 - update to 2.85 TGBT44N
ThinkSystem SR850 V2 - update to 2.85 TGBT44N
ThinkSystem SR860 V2 - update to 2.85 TGBT44N
ThinkSystem ST250 V2 - update to 2.85 TGBT44N
ThinkSystem ST258 V2 - update to 2.85 TGBT44N
ThinkSystem ST650 V2 - update to 2.85 TGBT44N
ThinkSystem ST658 V2 - update to 2.85 TGBT44N
ThinkAgile MX3331-H Hybrid Certified node - update to 2.85 TGBT44N
ThinkAgile HX5530 Appliance - update to 2.85 TGBT44N
ThinkAgile VX3331 Certified Node - update to 2.85 TGBT44N
ThinkAgile HX1331 Certified Node - update to 2.85 TGBT44N
ThinkAgile HX2330 Appliance - update to 2.85 TGBT44N
ThinkAgile HX2331 Certified Node - update to 2.85 TGBT44N
ThinkAgile HX3330 Appliance - update to 2.85 TGBT44N
ThinkAgile HX3331 Certified Node - update to 2.85 TGBT44N
ThinkAgile HX3331 Node SAP HANA - update to 2.85 TGBT44N
ThinkAgile HX5531 Certified Node - update to 2.85 TGBT44N
ThinkAgile HX7530 Appl for SAP HANA - update to 2.85 TGBT44N
ThinkAgile HX7531 Certified Node - update to 2.85 TGBT44N
ThinkAgile HX7531 Node SAP HANA - update to 2.85 TGBT44N
ThinkAgile MX3530 F All flash Appliance - update to 2.85 TGBT44N
ThinkAgile MX3330-H Hybrid Appliance - update to 2.85 TGBT44N
ThinkAgile MX3330-F All-flash Appliance - update to 2.85 TGBT44N
ThinkAgile MX3331-F All-flash Certified node - update to 2.85 TGBT44N
ThinkAgile HX7821 Certified Node - update to 2.90 PSI352F
ThinkAgile VX 4U Certified Node - update to 2.90 PSI352F
ThinkAgile HX7820 Appliance - update to 2.90 PSI352F
ThinkSystem SR950 - update to 2.90 PSI352F
ThinkAgile VX7820 - update to 2.90 PSI352F
ThinkAgile MX Edge Appliance - MX1020 - update to 3.91 TEI3E2G
ThinkSystem SE350 - update to 3.91 TEI3E2G
ThinkSystem SR850P - update to 3.91 TEI3E2G
ThinkSystem SR670 - update to 3.91 TEI3E2G
ThinkAgile MX1021 on SE350 - update to 3.91 TEI3E2G
ThinkAgile HX1021 Edge Certified Node 3yr - update to 3.91 TEI3E2G
ThinkAgile HX3375 Appliance - update to 5.00 D8BT54M
ThinkSystem SR645 - update to 5.00 D8BT54M
ThinkAgile HX3376 Certified Node - update to 5.00 D8BT54M
ThinkSystem SR665 - update to 5.00 D8BT54M
ThinkAgile VX 1SE Certified Node - update to 6.20 TEI3F2H
ThinkAgile HX2720-E Appliance - update to 6.20 TEI3F2H
ThinkSystem SR850 - update to 6.20 TEI3F2H
ThinkSystem SR258 - update to 6.20 TEI3F2H
ThinkSystem SR250 - update to 6.20 TEI3F2H
ThinkSystem SR158 - update to 6.20 TEI3F2H
ThinkSystem SR150 - update to 6.20 TEI3F2H
ThinkSystem SN850 - update to 6.20 TEI3F2H
ThinkSystem SN550 - update to 6.20 TEI3F2H
ThinkAgile HX Enclosure Certified Node - update to 6.20 TEI3F2H
ThinkAgile VX1320 - update to 6.20 TEI3F2H
ThinkAgile VX3720 - update to 6.20 TEI3F2H
ThinkSystem ST258 - update to 6.20 TEI3F2H
ThinkSystem ST250 - update to 6.20 TEI3F2H
ThinkAgile VX 2U4N Certified Node - update to 6.20 TEI3F2H
ThinkSystem SD530 - update to 6.20 TEI3F2H
ThinkSystem SD650 DWC Dual Node Tray - update to 6.20 TEI3F2H
ThinkSystem SR860 - update to 6.20 TEI3F2H
ThinkAgile HX3721 Certified Node - update to 6.20 TEI3F2H
ThinkAgile HX3720 Appliance - update to 6.20 TEI3F2H
ThinkAgile HX1520-R Appliance - update to 9.80 CDI3B2H
ThinkAgile HX2321 Certified Node - update to 9.80 CDI3B2H
ThinkAgile HX1321 Certified Node - update to 9.80 CDI3B2H
ThinkAgile HX2320-E Appliance - update to 9.80 CDI3B2H
ThinkAgile HX1320 Appliance - update to 9.80 CDI3B2H
ThinkSystem ST550 - update to 9.80 CDI3B2H
ThinkAgile HX1521-R Certified Node - update to 9.80 CDI3B2H
ThinkSystem SR550 - update to 9.80 CDI3B2H
ThinkAgile HX5521 Certified Node - update to 9.80 CDI3B2H
ThinkAgile VX3320 - update to 9.80 CDI3B2H
ThinkAgile VX2320 - update to 9.80 CDI3B2H
ThinkAgile VX3520-G - update to 9.80 CDI3B2H
ThinkAgile VX5520 - update to 9.80 CDI3B2H
ThinkAgile VX7320 N - update to 9.80 CDI3B2H
ThinkAgile HX7521 Certified Node - update to 9.80 CDI3B2H
ThinkAgile VX7520 - update to 9.80 CDI3B2H
ThinkAgile VX7520 N - update to 9.80 CDI3B2H
ThinkAgile HX7520 Appliance - update to 9.80 CDI3B2H
ThinkAgile HX5521-C Certified Node - update to 9.80 CDI3B2H
ThinkStation P920 Rack Workstation - update to 9.80 CDI3B2H
ThinkAgile HX3320 Appliance - update to 9.80 CDI3B2H
ThinkAgile HX5520-C Appliance - update to 9.80 CDI3B2H
ThinkAgile HX5520 Appliance - update to 9.80 CDI3B2H
ThinkAgile HX3521-G Certified Node - update to 9.80 CDI3B2H
ThinkAgile HX3520-G Appliance - update to 9.80 CDI3B2H
ThinkSystem SR530 - update to 9.80 CDI3B2H
ThinkSystem SR570 - update to 9.80 CDI3B2H
ThinkSystem SR590 - update to 9.80 CDI3B2H
ThinkSystem SR630 - update to 9.80 CDI3B2H
ThinkSystem SR650 - update to 9.80 CDI3B2H
ThinkAgile HX3321 Certified Node - update to 9.80 CDI3B2H
IBM Cloud Pak System - update to 2.3.4.0

• https://support.lenovo.com/us/en/product_security/LEN-140960

• Multiple vulnerabilities in Lenovo XClarity Controller (XCC)
• Multiple vulnerabilities in IBM Cloud Pak System