Privilege Escalation Vulnerability in XCC Upload Processing
CVE-2024-38511
7.2HIGH
What is CVE-2024-38511?
A privilege escalation vulnerability exists in Lenovo's XCC product related to the upload processing functionality. This flaw can be exploited by an authenticated user with elevated privileges to execute command injection through specially crafted file uploads, potentially compromising system integrity and security. Users are advised to review their configurations and update to the latest versions of XCC to mitigate the risk associated with this vulnerability.
Affected Version(s)
XClarity Controller various