CVE-2022-34884

published 2023-01-30

CVE-2022-34884: A buffer overflow exists in the Remote Presence subsystem which can potentially allow valid, authenticated users to cause a recoverable subsystem denial of…

Priority P4 29 medium 6.5 CVSS 3.1

AV N AC L PR L UI N S U C N I N A H

A buffer overflow exists in the Remote Presence subsystem which can potentially allow valid, authenticated users to cause a recoverable subsystem denial of service.

Affected

99 ranges · showing 25

Vendor	Product	Version range	Fixed in
lenovo	lenovo_xclarity_controller	—	—
lenovo	thinkagile_hx1021_firmware	< 3.60_tei386m	3.60_tei386m
lenovo	thinkagile_hx1320_firmware	< 8.40-cdi394n	8.40-cdi394n
lenovo	thinkagile_hx1321_firmware	< 8.40-cdi394n	8.40-cdi394n
lenovo	thinkagile_hx1520-r_firmware	< 8.40-cdi394n	8.40-cdi394n
lenovo	thinkagile_hx1521-r_firmware	< 8.40-cdi394n	8.40-cdi394n
lenovo	thinkagile_hx2320-e_firmware	< 8.40-cdi394n	8.40-cdi394n
lenovo	thinkagile_hx2321_firmware	< 8.40-cdi394n	8.40-cdi394n
lenovo	thinkagile_hx2720-e_firmware	< 5.20_tei3c8m	5.20_tei3c8m
lenovo	thinkagile_hx3320_firmware	< 8.40-cdi394n	8.40-cdi394n
lenovo	thinkagile_hx3321_firmware	< 8.40-cdi394n	8.40-cdi394n
lenovo	thinkagile_hx3375_firmware	< 4.10_d8bt38l	4.10_d8bt38l
lenovo	thinkagile_hx3376_firmware	< 4.10_d8bt38l	4.10_d8bt38l
lenovo	thinkagile_hx3520-g_firmware	< 8.40-cdi394n	8.40-cdi394n
lenovo	thinkagile_hx3521-g_firmware	< 8.40-cdi394n	8.40-cdi394n
lenovo	thinkagile_hx3720_firmware	< 5.20_tei3c8m	5.20_tei3c8m
lenovo	thinkagile_hx3721_firmware	< 5.20_tei3c8m	5.20_tei3c8m
lenovo	thinkagile_hx5520-c_firmware	< 8.40-cdi394n	8.40-cdi394n
lenovo	thinkagile_hx5520_firmware	< 8.40-cdi394n	8.40-cdi394n
lenovo	thinkagile_hx5521-c_firmware	< 8.40-cdi394n	8.40-cdi394n
lenovo	thinkagile_hx5521_firmware	< 8.40-cdi394n	8.40-cdi394n
lenovo	thinkagile_hx7520_firmware	< 8.40-cdi394n	8.40-cdi394n
lenovo	thinkagile_hx7521_firmware	< 8.40-cdi394n	8.40-cdi394n
lenovo	thinkagile_hx7820_firmware	< 2.50_psi346l	2.50_psi346l
lenovo	thinkagile_hx7821_firmware	< 2.50_psi346l	2.50_psi346l

Stop checking back — get the weekly exploitation signal.

Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.

CWE-121 CWE-787