CVE-2024-8279: Lenovo HX1021 Edge Certified Node 3yr Thinkagile Xcc

High severity, CVSS 7.2. EPSS: 1.1% chance of exploitation in the next 30 days.

A privilege escalation vulnerability was discovered in XCC that could allow a valid, authenticated XCC user with elevated privileges to perform command injection via specially crafted file uploads.

Affected products

  • Lenovo HX1021 Edge Certified Node 3yr Thinkagile Xcc: before 4.11 TEI3E4A (fixed in 4.11 TEI3E4A)
  • Lenovo HX1320 Appliance Thinkagile Xcc: before 9.97 CDI3B4B (fixed in 9.97 CDI3B4B)
  • Lenovo HX1321 Certified Node Thinkagile Xcc: before 9.97 CDI3B4B (fixed in 9.97 CDI3B4B)
  • Lenovo HX1331 Certified Node Thinkagile Xcc: before 4.71 AFBT48C (fixed in 4.71 AFBT48C)
  • Lenovo HX1520-R Appliance Thinkagile Xcc: before 9.97 CDI3B4B (fixed in 9.97 CDI3B4B)
  • Lenovo HX1521-R Certified Node Thinkagile Xcc: before 9.97 CDI3B4B (fixed in 9.97 CDI3B4B)
  • Lenovo HX2320-E Appliance Thinkagile Xcc: before 9.97 CDI3B4B (fixed in 9.97 CDI3B4B)
  • Lenovo HX2321 Certified Node Thinkagile Xcc: before 9.97 CDI3B4B (fixed in 9.97 CDI3B4B)
  • Lenovo HX2330 Appliance Thinkagile Xcc: before 4.71 AFBT48C (fixed in 4.71 AFBT48C)
  • Lenovo HX2331 Certified Node Thinkagile Xcc: before 4.71 AFBT48C (fixed in 4.71 AFBT48C)
  • Lenovo HX2720-E Appliance Thinkagile Xcc: before 6.36 TEI3F4A (fixed in 6.36 TEI3F4A)
  • Lenovo HX3320 Appliance Thinkagile Xcc: before 9.97 CDI3B4B (fixed in 9.97 CDI3B4B)
  • Lenovo HX3321 Certified Node Thinkagile Xcc: before 9.97 CDI3B4B (fixed in 9.97 CDI3B4B)
  • Lenovo HX3330 Appliance Thinkagile Xcc: before 4.71 AFBT48C (fixed in 4.71 AFBT48C)
  • Lenovo HX3331 Certified Node Thinkagile Xcc: before 4.71 AFBT48C (fixed in 4.71 AFBT48C)
  • Lenovo HX3331 Node SAP Hana Thinkagile Xcc: before 4.71 AFBT48C (fixed in 4.71 AFBT48C)
  • Lenovo HX3375 Appliance Thinkagile Xcc: before 5.61 D8BT64D (fixed in 5.61 D8BT64D)
  • Lenovo HX3376 Certified Node Thinkagile Xcc: before 5.61 D8BT64D (fixed in 5.61 D8BT64D)
  • Lenovo HX3520-G Appliance Thinkagile Xcc: before 9.97 CDI3B4B (fixed in 9.97 CDI3B4B)
  • Lenovo HX3521-G Certified Node Thinkagile Xcc: before 9.97 CDI3B4B (fixed in 9.97 CDI3B4B)
  • Lenovo HX3720 Appliance Thinkagile Xcc: before 6.36 TEI3F4A (fixed in 6.36 TEI3F4A)
  • Lenovo HX3721 Certified Node Thinkagile Xcc: before 6.36 TEI3F4A (fixed in 6.36 TEI3F4A)
  • Lenovo HX5520-C Appliance Thinkagile Xcc: before 9.97 CDI3B4B (fixed in 9.97 CDI3B4B)
  • Lenovo HX5520 Appliance Thinkagile Xcc: before 9.97 CDI3B4B (fixed in 9.97 CDI3B4B)
  • Lenovo HX5521-C Certified Node Thinkagile Xcc: before 9.97 CDI3B4B (fixed in 9.97 CDI3B4B)
  • and 133 more

Published 2024-09-13. Last modified 2026-06-17.