CVE-2022-34888: Lenovo Thinkagile HX1021 Firmware

Medium severity, CVSS 4.3. EPSS: 0.4% chance of exploitation in the next 30 days.

The Remote Mount feature can potentially be abused by valid, authenticated users to make connections to internal services that may not normally be accessible to users. Internal service access controls, as applicable, remain in effect.

Affected products

  • Lenovo Thinkagile HX1021 Firmware: before 3.60_tei386m (fixed in 3.60_tei386m)
  • Lenovo Thinkagile HX1320 Firmware: before 8.40-cdi394n (fixed in 8.40-cdi394n)
  • Lenovo Thinkagile HX1321 Firmware: before 8.40-cdi394n (fixed in 8.40-cdi394n)
  • Lenovo Thinkagile HX1520-R Firmware: before 8.40-cdi394n (fixed in 8.40-cdi394n)
  • Lenovo Thinkagile HX1521-R Firmware: before 8.40-cdi394n (fixed in 8.40-cdi394n)
  • Lenovo Thinkagile HX2320-E Firmware: before 8.40-cdi394n (fixed in 8.40-cdi394n)
  • Lenovo Thinkagile HX2321 Firmware: before 8.40-cdi394n (fixed in 8.40-cdi394n)
  • Lenovo Thinkagile HX2720-E Firmware: before 5.20_tei3c8m (fixed in 5.20_tei3c8m)
  • Lenovo Thinkagile HX3320 Firmware: before 8.40-cdi394n (fixed in 8.40-cdi394n)
  • Lenovo Thinkagile HX3321 Firmware: before 8.40-cdi394n (fixed in 8.40-cdi394n)
  • Lenovo Thinkagile HX3375 Firmware: before 4.10_d8bt38l (fixed in 4.10_d8bt38l)
  • Lenovo Thinkagile HX3376 Firmware: before 4.10_d8bt38l (fixed in 4.10_d8bt38l)
  • Lenovo Thinkagile HX3520-G Firmware: before 8.40-cdi394n (fixed in 8.40-cdi394n)
  • Lenovo Thinkagile HX3521-G Firmware: before 8.40-cdi394n (fixed in 8.40-cdi394n)
  • Lenovo Thinkagile HX3720 Firmware: before 5.20_tei3c8m (fixed in 5.20_tei3c8m)
  • Lenovo Thinkagile HX3721 Firmware: before 5.20_tei3c8m (fixed in 5.20_tei3c8m)
  • Lenovo Thinkagile HX5520-C Firmware: before 8.40-cdi394n (fixed in 8.40-cdi394n)
  • Lenovo Thinkagile HX5520 Firmware: before 8.40-cdi394n (fixed in 8.40-cdi394n)
  • Lenovo Thinkagile HX5521-C Firmware: before 8.40-cdi394n (fixed in 8.40-cdi394n)
  • Lenovo Thinkagile HX5521 Firmware: before 8.40-cdi394n (fixed in 8.40-cdi394n)
  • Lenovo Thinkagile HX7520 Firmware: before 8.40-cdi394n (fixed in 8.40-cdi394n)
  • Lenovo Thinkagile HX7521 Firmware: before 8.40-cdi394n (fixed in 8.40-cdi394n)
  • Lenovo Thinkagile HX7820 Firmware: before 2.50_psi346l (fixed in 2.50_psi346l)
  • Lenovo Thinkagile HX7821 Firmware: before 2.50_psi346l (fixed in 2.50_psi346l)
  • Lenovo Thinkagile HX Enclosure Certified Node Firmware: before 5.20_tei3c8m (fixed in 5.20_tei3c8m)
  • and 73 more

Published 2023-01-30. Last modified 2026-06-17.