Privilege Escalation Vulnerability in IPMI Could Allow Arbitrary Code Execution
CVE-2024-38509
7.2HIGH
What is CVE-2024-38509?
A privilege escalation vulnerability exists in Lenovo's XCC product that enables an authenticated user with elevated privileges to execute arbitrary code. This vulnerability arises from improper handling of specially crafted IPMI commands, potentially allowing unauthorized code execution within the affected system. Organizations utilizing Lenovo XCC should review security updates and apply necessary patches to mitigate risks associated with this vulnerability.
Affected Version(s)
XClarity Controller various