CVEvulnerability

CVE-2022-34888

4.3 MEDIUM Published 2023-01-30 Modified 2026-06-17 Official page ↗
Status
Modified
Published
2023-01-30
Last modified
2026-06-17
Assigner
[email protected]
CVSS 3.1 ([email protected])
2.7 LOW — CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:L
CVSS 3.1 ([email protected])
4.3 MEDIUM — CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N
Weaknesses
CWE-184, CWE-697

Description

The Remote Mount feature can potentially be abused by valid, authenticated users to make connections to internal services that may not normally be accessible to users. Internal service access controls, as applicable, remain in effect.

Affected configurations

• lenovo thinkagile vx3331 firmware (< 1.80 afbt20n) • lenovo thinkagile hx enclosure certified node firmware (< 5.20 tei3c8m) • lenovo thinkagile hx1021 firmware (< 3.60 tei386m) • lenovo thinkagile hx1320 firmware (< 8.40-cdi394n) • lenovo thinkagile hx1321 firmware (< 8.40-cdi394n) • lenovo thinkagile hx1520-r firmware (< 8.40-cdi394n) • lenovo thinkagile hx1521-r firmware (< 8.40-cdi394n) • lenovo thinkagile hx2320-e firmware (< 8.40-cdi394n) • lenovo thinkagile hx2321 firmware (< 8.40-cdi394n) • lenovo thinkagile hx2720-e firmware (< 5.20 tei3c8m) • lenovo thinkagile hx3320 firmware (< 8.40-cdi394n) • lenovo thinkagile hx3321 firmware (< 8.40-cdi394n) • lenovo thinkagile hx3375 firmware (< 4.10 d8bt38l) • lenovo thinkagile hx3376 firmware (< 4.10 d8bt38l) • lenovo thinkagile hx3520-g firmware (< 8.40-cdi394n) • lenovo thinkagile hx3521-g firmware (< 8.40-cdi394n) • lenovo thinkagile hx3720 firmware (< 5.20 tei3c8m) • lenovo thinkagile hx3721 firmware (< 5.20 tei3c8m) • lenovo thinkagile hx5520 firmware (< 8.40-cdi394n) • lenovo thinkagile hx5520-c firmware (< 8.40-cdi394n) • lenovo thinkagile hx5521 firmware (< 8.40-cdi394n) • lenovo thinkagile hx5521-c firmware (< 8.40-cdi394n) • lenovo thinkagile hx7520 firmware (< 8.40-cdi394n) • lenovo thinkagile hx7521 firmware (< 8.40-cdi394n) • lenovo thinkagile hx7820 firmware (< 2.50 psi346l) • lenovo thinkagile hx7821 firmware (< 2.50 psi346l) • lenovo thinkagile mx1020 firmware (<= 3.60 tei386m) • lenovo thinkagile mx3330-f firmware (< 1.80 afbt20n) • lenovo thinkagile mx3330-h firmware (< 1.80 afbt20n) • lenovo thinkagile mx3331-f firmware (< 1.80 afbt20n) • lenovo thinkagile mx3331-h firmware (< 1.80 afbt20n) • lenovo thinkagile mx3530 f firmware (< 1.80 afbt20n) • lenovo thinkagile mx3530-h firmware (< 1.80 afbt20n) • lenovo thinkagile mx3531-f firmware (< 1.80 afbt20n) • lenovo thinkagile mx3531 h firmware (< 1.80 afbt20n) • lenovo thinkagile mx1021 firmware (< 3.60 tei386m) • lenovo thinkagile vx 1se certified node firmware (< 5.20 tei3c8m) • lenovo thinkagile vx 2u4n firmware (< 5.20 tei3c8m) • lenovo thinkagile vx 4u firmware (< 2.50 psi346l) • lenovo thinkagile vx1320 firmware (< 5.20 tei3c8m) • lenovo thinkagile vx2320 firmware (< 8.40-cdi394n) • lenovo thinkagile vx2330 firmware (< 1.80 afbt20n) • lenovo thinkagile vx3320 firmware (< 8.40-cdi394n) • lenovo thinkagile vx3330 firmware (< 1.80 afbt20n) • lenovo thinkagile vx3520-g firmware (< 8.40-cdi394n) • lenovo thinkagile vx3530-g firmware (< 1.80 afbt20n) • lenovo thinkagile vx3720 firmware (< 5.20 tei3c8m) • lenovo thinkagile vx5520 firmware (< 8.40-cdi394n) • lenovo thinkagile vx5530 firmware (< 1.80 afbt20n) • lenovo thinkagile vx7320 n firmware (< 8.40-cdi394n) • lenovo thinkagile vx7330 firmware (< 1.80 afbt20n) • lenovo thinkagile vx7520 firmware (< 8.40-cdi394n) • lenovo thinkagile vx7520 n firmware (< 8.40-cdi394n) • lenovo thinkagile vx7530 firmware (< 1.80 afbt20n) • lenovo thinkagile vx7531 firmware (< 1.80 afbt20n) • lenovo thinkagile vx7820 firmware (< 2.50 psi346l) • lenovo thinkedge se450 firmware (< 1.10 usx304w) • lenovo thinkstation p920 firmware (< 8.40-cdi394n) • lenovo thinksystem sd530 firmware (< 5.20 tei3c8m) • lenovo thinksystem sd630 v2 firmware (< 2.00 tgbt36o) … and 38 more

Related

Weakness · CWE (2)

  • CWE-184 Incomplete List of Disallowed Inputs weakness
  • CWE-697 Incorrect Comparison weakness

References