low2.7
CVE-2022-34888
The Remote Mount feature can potentially be abused by valid, authenticated users to make connections to internal services that may not normally be accessible t…
Impact
The Remote Mount feature can potentially be abused by valid, authenticated users to make connections to internal services that may not normally be accessible to users. Internal service access controls, as applicable, remain in effect.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Lenovo | Thinkagile Vx3331 Firmware | before 1.80_afbt20n |
| Lenovo | Thinkagile Hx Enclosure Certified Node Firmware | before 5.20_tei3c8m |
| Lenovo | Thinkagile Hx1021 Firmware | before 3.60_tei386m |
| Lenovo | Thinkagile Hx1320 Firmware | before 8.40-cdi394n |
| Lenovo | Thinkagile Hx1321 Firmware | before 8.40-cdi394n |
| Lenovo | Thinkagile Hx1520-R Firmware | before 8.40-cdi394n |
| Lenovo | Thinkagile Hx1521-R Firmware | before 8.40-cdi394n |
| Lenovo | Thinkagile Hx2320-E Firmware | before 8.40-cdi394n |
| Lenovo | Thinkagile Hx2321 Firmware | before 8.40-cdi394n |
| Lenovo | Thinkagile Hx2720-E Firmware | before 5.20_tei3c8m |
| Lenovo | Thinkagile Hx3320 Firmware | before 8.40-cdi394n |
| Lenovo | Thinkagile Hx3321 Firmware | before 8.40-cdi394n |