← All advisories

High severity7.5NVD Advisory· Published Oct 25, 2023· Updated Jun 17, 2026

CVE-2023-4607

CVE-2023-4607

Description

An authenticated XCC user can change permissions for any user through a crafted API command.

Affected products

2

Lenovo/XCCllm-fuzzy
Lenovo/XClarity Controllercpe-rescue
Range: various

Patches

Vulnerability mechanics

References

1

support.lenovo.com/us/en/product_security/LEN-140960nvdVendor Advisory

News mentions

0

No linked articles in our index yet.