Description
IPMI credentials may be captured in XCC audit log entries when the account username length is 16 characters.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Lenovo | HX5530 Appliance (ThinkAgile) XCC | < 5.10 AFBT50F | 5.10 AFBT50F |
| Lenovo | HX7530 Appliance (ThinkAgile) XCC | < 5.10 AFBT50F | 5.10 AFBT50F |
| Lenovo | ST250 V3 (ThinkSystem) XCC | < 3.10 CTX318G | 3.10 CTX318G |
| Lenovo | VX3331 Certified Node (ThinkAgile) XCC | < 5.10 AFBT50F | 5.10 AFBT50F |
| Lenovo | HX Enclosure Certified Node (ThinkAgile) XCC | < 6.40 TEI3F3E | 6.40 TEI3F3E |
| Lenovo | HX1021 Edge Certified Node 3yr (ThinkAgile) XCC | < 4.12 TEI3E4D | 4.12 TEI3E4D |
| Lenovo | HX1320 Appliance (ThinkAgile) XCC | < 9.98 CDI3B4E | 9.98 CDI3B4E |
| Lenovo | HX1321 Certified Node (ThinkAgile) XCC | < 9.98 CDI3B4E | 9.98 CDI3B4E |
| Lenovo | HX1331 Certified Node (ThinkAgile) XCC | < 5.10 AFBT50F | 5.10 AFBT50F |
| Lenovo | HX1520-R Appliance (ThinkAgile) XCC | < 9.98 CDI3B4E | 9.98 CDI3B4E |
| Lenovo | HX1521-R Certified Node (ThinkAgile) XCC | < 9.98 CDI3B4E | 9.98 CDI3B4E |
| Lenovo | HX2320-E Appliance (ThinkAgile) XCC | < 9.98 CDI3B4E | 9.98 CDI3B4E |
| Lenovo | HX2321 Certified Node (ThinkAgile) XCC | < 9.98 CDI3B4E | 9.98 CDI3B4E |
| Lenovo | HX2330 Appliance (ThinkAgile) XCC | < 5.10 AFBT50F | 5.10 AFBT50F |
| Lenovo | HX2331 Certified Node (ThinkAgile) XCC | < 5.10 AFBT50F | 5.10 AFBT50F |
| Lenovo | HX2720-E Appliance (ThinkAgile) XCC | < 6.40 TEI3F3E | 6.40 TEI3F3E |
| Lenovo | HX3320 Appliance (ThinkAgile) XCC | < 9.98 CDI3B4E | 9.98 CDI3B4E |
| Lenovo | HX3321 Certified Node (ThinkAgile) XCC | < 9.98 CDI3B4E | 9.98 CDI3B4E |
| Lenovo | HX3330 Appliance (ThinkAgile) XCC | < 5.10 AFBT50F | 5.10 AFBT50F |
| Lenovo | HX3331 Certified Node (ThinkAgile) XCC | < 5.10 AFBT50F | 5.10 AFBT50F |
| Lenovo | HX3331 Node SAP HANA (ThinkAgile) XCC | < 5.10 AFBT50F | 5.10 AFBT50F |
| Lenovo | HX3375 Appliance (ThinkAgile) XCC | < 5.80 D8BT66D | 5.80 D8BT66D |
| Lenovo | HX3376 Certified Node (ThinkAgile) XCC | < 5.80 D8BT66D | 5.80 D8BT66D |
| Lenovo | HX3520-G Appliance (ThinkAgile) XCC | < 9.98 CDI3B4E | 9.98 CDI3B4E |
| Lenovo | HX3521-G Certified Node (ThinkAgile) XCC | < 9.98 CDI3B4E | 9.98 CDI3B4E |
| Lenovo | HX3720 Appliance (ThinkAgile) XCC | < 6.40 TEI3F3E | 6.40 TEI3F3E |
| Lenovo | HX3721 Certified Node (ThinkAgile) XCC | < 6.40 TEI3F3E | 6.40 TEI3F3E |
| Lenovo | HX5520 Appliance (ThinkAgile) XCC | < 9.98 CDI3B4E | 9.98 CDI3B4E |
| Lenovo | HX5520-C Appliance (ThinkAgile) XCC | < 9.98 CDI3B4E | 9.98 CDI3B4E |
| Lenovo | HX5521 Certified Node (ThinkAgile) XCC | < 9.98 CDI3B4E | 9.98 CDI3B4E |
| Lenovo | HX5521-C Certified Node (ThinkAgile) XCC | < 9.98 CDI3B4E | 9.98 CDI3B4E |
| Lenovo | HX5531 Certified Node (ThinkAgile) XCC | < 5.10 AFBT50F | 5.10 AFBT50F |
| Lenovo | HX7520 Appliance (ThinkAgile) XCC | < 9.98 CDI3B4E | 9.98 CDI3B4E |
| Lenovo | HX7521 Certified Node (ThinkAgile) XCC | < 9.98 CDI3B4E | 9.98 CDI3B4E |
| Lenovo | HX7530 Appl for SAP HANA (ThinkAgile) XCC | < 5.10 AFBT50F | 5.10 AFBT50F |
| Lenovo | HX7531 Certified Node (ThinkAgile) XCC | < 5.10 AFBT50F | 5.10 AFBT50F |
| Lenovo | HX7531 Node SAP HANA (ThinkAgile) XCC | < 5.10 AFBT50F | 5.10 AFBT50F |
| Lenovo | HX7820 Appliance (ThinkAgile) XCC | < 3.20 PSI356B | 3.20 PSI356B |
| Lenovo | HX7821 Certified Node (ThinkAgile) XCC | < 3.20 PSI356B | 3.20 PSI356B |
| Lenovo | MX Edge Appliance - MX1020 (ThinkAgile) XCC | < 4.12 TEI3E4D | 4.12 TEI3E4D |
| Lenovo | MX3330-F All-flash Appliance (ThinkAgile) XCC | < 5.10 AFBT50F | 5.10 AFBT50F |
| Lenovo | MX3330-H Hybrid Appliance (ThinkAgile) XCC | < 5.10 AFBT50F | 5.10 AFBT50F |
| Lenovo | MX3331-F All-flash Certified node (ThinkAgile) XCC | < 5.10 AFBT50F | 5.10 AFBT50F |
| Lenovo | MX3331-H Hybrid Certified node (ThinkAgile) XCC | < 5.10 AFBT50F | 5.10 AFBT50F |
| Lenovo | MX3530 F All flash Appliance (ThinkAgile) XCC | < 5.10 AFBT50F | 5.10 AFBT50F |
| Lenovo | MX3530-H Hybrid Appliance (ThinkAgile) XCC | < 5.10 AFBT50F | 5.10 AFBT50F |
| Lenovo | MX3531 H Hybrid Certified node (ThinkAgile) XCC | < 5.10 AFBT50F | 5.10 AFBT50F |
| Lenovo | MX3531-F All-flash Certified node (ThinkAgile) XCC | < 5.10 AFBT50F | 5.10 AFBT50F |
| Lenovo | P920 Rack Workstation (ThinkStation) XCC | < 9.98 CDI3B4E | 9.98 CDI3B4E |
| Lenovo | SD530 (ThinkSystem) XCC | < 6.40 TEI3F3E | 6.40 TEI3F3E |
| Lenovo | SD530 V3 (ThinkSystem) XCC | < 1.20 USX364F | 1.20 USX364F |
| Lenovo | SD550 V3 (ThinkSystem) XCC | < 1.20 USX364F | 1.20 USX364F |
| Lenovo | SD630 V2 (ThinkSystem) XCC | < 4.12 TGBT52D | 4.12 TGBT52D |
| Lenovo | SD650 DWC Dual Node Tray (ThinkSystem) XCC | < 6.40 TEI3F3E | 6.40 TEI3F3E |
| Lenovo | SD650 V2 (ThinkSystem) XCC | < 4.12 TGBT52D | 4.12 TGBT52D |
| Lenovo | SD650 V3 (ThinkSystem) XCC | < 7.10 USX358F | 7.10 USX358F |
| Lenovo | SD650-N V2 (ThinkSystem) XCC | < 4.12 TGBT52D | 4.12 TGBT52D |
| Lenovo | SD665 V3 (ThinkSystem) XCC | < 7.10 QGX344G | 7.10 QGX344G |
| Lenovo | SE350 (ThinkSystem) XCC | < 4.12 TEI3E4D | 4.12 TEI3E4D |
| Lenovo | SE350 V2 (ThinkEdge) XCC | < 4.10 IYX330J | 4.10 IYX330J |
| Lenovo | SE360 V2 (ThinkEdge) XCC | < 4.10 IYX330J | 4.10 IYX330J |
| Lenovo | SE450 (ThinkEdge) XCC | < 4.10 USX360F | 4.10 USX360F |
| Lenovo | SE455 V3 (ThinkEdge) XCC | < 4.10 MBX312K | 4.10 MBX312K |
| Lenovo | SN550 (ThinkSystem) XCC | < 6.40 TEI3F3E | 6.40 TEI3F3E |
| Lenovo | SN550 V2 (ThinkSystem) XCC | < 4.12 TGBT52D | 4.12 TGBT52D |
| Lenovo | SN850 (ThinkSystem) XCC | < 6.40 TEI3F3E | 6.40 TEI3F3E |
| Lenovo | SR150 (ThinkSystem) XCC | < 6.40 TEI3F3E | 6.40 TEI3F3E |
| Lenovo | SR158 (ThinkSystem) XCC | < 6.40 TEI3F3E | 6.40 TEI3F3E |
| Lenovo | SR250 (ThinkSystem) XCC | < 6.40 TEI3F3E | 6.40 TEI3F3E |
| Lenovo | SR250 V2 (ThinkSystem) XCC | < 4.12 TGBT52D | 4.12 TGBT52D |
| Lenovo | SR250 V3 (ThinkSystem) XCC | < 3.10 CTX318G | 3.10 CTX318G |
| Lenovo | SR258 (ThinkSystem) XCC | < 6.40 TEI3F3E | 6.40 TEI3F3E |
| Lenovo | SR258 V2 (ThinkSystem) XCC | < 4.12 TGBT52D | 4.12 TGBT52D |
| Lenovo | SR258 V3 (ThinkSystem) XCC | < 3.10 CTX318G | 3.10 CTX318G |
| Lenovo | SR530 (ThinkSystem) XCC | < 9.98 CDI3B4E | 9.98 CDI3B4E |
| Lenovo | SR550 (ThinkSystem) XCC | < 9.98 CDI3B4E | 9.98 CDI3B4E |
| Lenovo | SR570 (ThinkSystem) XCC | < 9.98 CDI3B4E | 9.98 CDI3B4E |
| Lenovo | SR590 (ThinkSystem) XCC | < 9.98 CDI3B4E | 9.98 CDI3B4E |
| Lenovo | SR630 (ThinkSystem) XCC | < 9.98 CDI3B4E | 9.98 CDI3B4E |
| Lenovo | SR630 V2 (ThinkSystem) XCC | < 5.10 AFBT50F | 5.10 AFBT50F |
| Lenovo | SR630 V3 (ThinkSystem) XCC | < 5.50 ESX334M | 5.50 ESX334M |
| Lenovo | SR635 V3 (ThinkSystem) XCC | < 3.50 KAX334N | 3.50 KAX334N |
| Lenovo | SR645 (ThinkSystem) XCC | < 5.80 D8BT66D | 5.80 D8BT66D |
| Lenovo | SR645 V3 (ThinkSystem) XCC | < 3.50 KAX334N | 3.50 KAX334N |
| Lenovo | SR650 (ThinkSystem) XCC | < 9.98 CDI3B4E | 9.98 CDI3B4E |
| Lenovo | SR650 V2 (ThinkSystem) XCC | < 5.10 AFBT50F | 5.10 AFBT50F |
| Lenovo | SR650 V3 (ThinkSystem) XCC | < 5.50 ESX334M | 5.50 ESX334M |
| Lenovo | SR655 V3 (ThinkSystem) XCC | < 3.50 KAX334N | 3.50 KAX334N |
| Lenovo | SR665 (ThinkSystem) XCC | < 5.80 D8BT66D | 5.80 D8BT66D |
| Lenovo | SR665 V3 (ThinkSystem) XCC | < 3.50 KAX334N | 3.50 KAX334N |
| Lenovo | SR670 (ThinkSystem) XCC | < 4.12 TEI3E4D | 4.12 TEI3E4D |
| Lenovo | SR670 V2 (ThinkSystem) XCC | < 4.12 TGBT52D | 4.12 TGBT52D |
| Lenovo | SR675 V3 (ThinkSystem) XCC | < 7.10 QGX344G | 7.10 QGX344G |
| Lenovo | SR850 (ThinkSystem) XCC | < 6.40 TEI3F3E | 6.40 TEI3F3E |
| Lenovo | SR850 V2 (ThinkSystem) XCC | < 4.12 TGBT52D | 4.12 TGBT52D |
| Lenovo | SR850 V3 (ThinkSystem) XCC | < 5.10 RSX314G | 5.10 RSX314G |
| Lenovo | SR850P (ThinkSystem) XCC | < 4.12 TEI3E4D | 4.12 TEI3E4D |
| Lenovo | SR860 (ThinkSystem) XCC | < 6.40 TEI3F3E | 6.40 TEI3F3E |
| Lenovo | SR860 V2 (ThinkSystem) XCC | < 4.12 TGBT52D | 4.12 TGBT52D |
| Lenovo | SR860 V3 (ThinkSystem) XCC | < 5.10 RSX314G | 5.10 RSX314G |
Advisories 1
- WID-SEC-2024-2116 Lenovo XClarity: Mehrere Schwachstellen BSI CERT-Bund (WID) · Sep 10, 2024