CVE-2023-4607: Lenovo Thinkagile HX1021 Edg Firmware

High severity, CVSS 8.8. EPSS: 0.5% chance of exploitation in the next 30 days.

An authenticated XCC user can change permissions for any user through a crafted API command.

Affected products

Lenovo Thinkagile HX1021 Edg Firmware: affected versions not specified
Lenovo Thinkagile HX1320 Firmware: affected versions not specified
Lenovo Thinkagile HX1321 Firmware: affected versions not specified
Lenovo Thinkagile HX1331 Firmware: affected versions not specified
Lenovo Thinkagile HX1520-R Firmware: affected versions not specified
Lenovo Thinkagile HX1521-R Firmware: affected versions not specified
Lenovo Thinkagile HX2320-E Firmware: affected versions not specified
Lenovo Thinkagile HX2321 Firmware: affected versions not specified
Lenovo Thinkagile HX2330 Firmware: affected versions not specified
Lenovo Thinkagile HX2331 Firmware: affected versions not specified
Lenovo Thinkagile HX2720-E Firmware: affected versions not specified
Lenovo Thinkagile HX3320 Firmware: affected versions not specified
Lenovo Thinkagile HX3321 Firmware: affected versions not specified
Lenovo Thinkagile HX3330 Firmware: affected versions not specified
Lenovo Thinkagile HX3331 Firmware: affected versions not specified
Lenovo Thinkagile HX3375 Firmware: affected versions not specified
Lenovo Thinkagile HX3376 Firmware: affected versions not specified
Lenovo Thinkagile HX3520-G Firmware: affected versions not specified
Lenovo Thinkagile HX3521-G Firmware: affected versions not specified
Lenovo Thinkagile HX3720 Firmware: affected versions not specified
Lenovo Thinkagile HX3721 Firmware: affected versions not specified
Lenovo Thinkagile HX5520-C Firmware: affected versions not specified
Lenovo Thinkagile HX5520 Firmware: affected versions not specified
Lenovo Thinkagile HX5521-C Firmware: affected versions not specified
Lenovo Thinkagile HX5521 Firmware: affected versions not specified
and 98 more

Published 2023-10-25. Last modified 2026-06-17.