CVE-2022-34884: Lenovo Thinkagile HX1021 Firmware

Medium severity, CVSS 6.5. EPSS: 0.6% chance of exploitation in the next 30 days.

A buffer overflow exists in the Remote Presence subsystem which can potentially allow valid, authenticated users to cause a recoverable subsystem denial of service.

Affected products

  • Lenovo Thinkagile HX1021 Firmware: before 3.60_tei386m (fixed in 3.60_tei386m)
  • Lenovo Thinkagile HX1320 Firmware: before 8.40-cdi394n (fixed in 8.40-cdi394n)
  • Lenovo Thinkagile HX1321 Firmware: before 8.40-cdi394n (fixed in 8.40-cdi394n)
  • Lenovo Thinkagile HX1520-R Firmware: before 8.40-cdi394n (fixed in 8.40-cdi394n)
  • Lenovo Thinkagile HX1521-R Firmware: before 8.40-cdi394n (fixed in 8.40-cdi394n)
  • Lenovo Thinkagile HX2320-E Firmware: before 8.40-cdi394n (fixed in 8.40-cdi394n)
  • Lenovo Thinkagile HX2321 Firmware: before 8.40-cdi394n (fixed in 8.40-cdi394n)
  • Lenovo Thinkagile HX2720-E Firmware: before 5.20_tei3c8m (fixed in 5.20_tei3c8m)
  • Lenovo Thinkagile HX3320 Firmware: before 8.40-cdi394n (fixed in 8.40-cdi394n)
  • Lenovo Thinkagile HX3321 Firmware: before 8.40-cdi394n (fixed in 8.40-cdi394n)
  • Lenovo Thinkagile HX3375 Firmware: before 4.10_d8bt38l (fixed in 4.10_d8bt38l)
  • Lenovo Thinkagile HX3376 Firmware: before 4.10_d8bt38l (fixed in 4.10_d8bt38l)
  • Lenovo Thinkagile HX3520-G Firmware: before 8.40-cdi394n (fixed in 8.40-cdi394n)
  • Lenovo Thinkagile HX3521-G Firmware: before 8.40-cdi394n (fixed in 8.40-cdi394n)
  • Lenovo Thinkagile HX3720 Firmware: before 5.20_tei3c8m (fixed in 5.20_tei3c8m)
  • Lenovo Thinkagile HX3721 Firmware: before 5.20_tei3c8m (fixed in 5.20_tei3c8m)
  • Lenovo Thinkagile HX5520-C Firmware: before 8.40-cdi394n (fixed in 8.40-cdi394n)
  • Lenovo Thinkagile HX5520 Firmware: before 8.40-cdi394n (fixed in 8.40-cdi394n)
  • Lenovo Thinkagile HX5521-C Firmware: before 8.40-cdi394n (fixed in 8.40-cdi394n)
  • Lenovo Thinkagile HX5521 Firmware: before 8.40-cdi394n (fixed in 8.40-cdi394n)
  • Lenovo Thinkagile HX7520 Firmware: before 8.40-cdi394n (fixed in 8.40-cdi394n)
  • Lenovo Thinkagile HX7521 Firmware: before 8.40-cdi394n (fixed in 8.40-cdi394n)
  • Lenovo Thinkagile HX7820 Firmware: before 2.50_psi346l (fixed in 2.50_psi346l)
  • Lenovo Thinkagile HX7821 Firmware: before 2.50_psi346l (fixed in 2.50_psi346l)
  • Lenovo Thinkagile HX Enclosure Certified Node Firmware: before 5.20_tei3c8m (fixed in 5.20_tei3c8m)
  • and 73 more

Published 2023-01-30. Last modified 2026-06-17.