CVE-2024-8059: Lenovo HX1021 Edge Certified Node 3yr Thinkagile Xcc

Medium severity, CVSS 4.3. EPSS: 0.2% chance of exploitation in the next 30 days.

IPMI credentials may be captured in XCC audit log entries when the account username length is 16 characters.

Affected products

• Lenovo HX1021 Edge Certified Node 3yr Thinkagile Xcc: before 4.12 TEI3E4D (fixed in 4.12 TEI3E4D)
• Lenovo HX1320 Appliance Thinkagile Xcc: before 9.98 CDI3B4E (fixed in 9.98 CDI3B4E)
• Lenovo HX1321 Certified Node Thinkagile Xcc: before 9.98 CDI3B4E (fixed in 9.98 CDI3B4E)
• Lenovo HX1331 Certified Node Thinkagile Xcc: before 5.10 AFBT50F (fixed in 5.10 AFBT50F)
• Lenovo HX1520-R Appliance Thinkagile Xcc: before 9.98 CDI3B4E (fixed in 9.98 CDI3B4E)
• Lenovo HX1521-R Certified Node Thinkagile Xcc: before 9.98 CDI3B4E (fixed in 9.98 CDI3B4E)
• Lenovo HX2320-E Appliance Thinkagile Xcc: before 9.98 CDI3B4E (fixed in 9.98 CDI3B4E)
• Lenovo HX2321 Certified Node Thinkagile Xcc: before 9.98 CDI3B4E (fixed in 9.98 CDI3B4E)
• Lenovo HX2330 Appliance Thinkagile Xcc: before 5.10 AFBT50F (fixed in 5.10 AFBT50F)
• Lenovo HX2331 Certified Node Thinkagile Xcc: before 5.10 AFBT50F (fixed in 5.10 AFBT50F)
• Lenovo HX2720-E Appliance Thinkagile Xcc: before 6.40 TEI3F3E (fixed in 6.40 TEI3F3E)
• Lenovo HX3320 Appliance Thinkagile Xcc: before 9.98 CDI3B4E (fixed in 9.98 CDI3B4E)
• Lenovo HX3321 Certified Node Thinkagile Xcc: before 9.98 CDI3B4E (fixed in 9.98 CDI3B4E)
• Lenovo HX3330 Appliance Thinkagile Xcc: before 5.10 AFBT50F (fixed in 5.10 AFBT50F)
• Lenovo HX3331 Certified Node Thinkagile Xcc: before 5.10 AFBT50F (fixed in 5.10 AFBT50F)
• Lenovo HX3331 Node SAP Hana Thinkagile Xcc: before 5.10 AFBT50F (fixed in 5.10 AFBT50F)
• Lenovo HX3375 Appliance Thinkagile Xcc: before 5.80 D8BT66D (fixed in 5.80 D8BT66D)
• Lenovo HX3376 Certified Node Thinkagile Xcc: before 5.80 D8BT66D (fixed in 5.80 D8BT66D)
• Lenovo HX3520-G Appliance Thinkagile Xcc: before 9.98 CDI3B4E (fixed in 9.98 CDI3B4E)
• Lenovo HX3521-G Certified Node Thinkagile Xcc: before 9.98 CDI3B4E (fixed in 9.98 CDI3B4E)
• Lenovo HX3720 Appliance Thinkagile Xcc: before 6.40 TEI3F3E (fixed in 6.40 TEI3F3E)
• Lenovo HX3721 Certified Node Thinkagile Xcc: before 6.40 TEI3F3E (fixed in 6.40 TEI3F3E)
• Lenovo HX5520-C Appliance Thinkagile Xcc: before 9.98 CDI3B4E (fixed in 9.98 CDI3B4E)
• Lenovo HX5520 Appliance Thinkagile Xcc: before 9.98 CDI3B4E (fixed in 9.98 CDI3B4E)
• Lenovo HX5521-C Certified Node Thinkagile Xcc: before 9.98 CDI3B4E (fixed in 9.98 CDI3B4E)
• and 115 more

Published 2024-09-13. Last modified 2026-06-17.