CVE-2022-34888

published 2023-01-30

CVE-2022-34888: The Remote Mount feature can potentially be abused by valid, authenticated users to make connections to internal services that may not normally be accessible…

Priority P4 20 medium 4.3 CVSS 3.1

AV N AC L PR L UI N S U C L I N A N

The Remote Mount feature can potentially be abused by valid, authenticated users to make connections to internal services that may not normally be accessible to users. Internal service access controls, as applicable, remain in effect.

Affected

99 ranges · showing 25

Vendor	Product	Version range	Fixed in
lenovo	lenovo_xclarity_controller	—	—
lenovo	thinkagile_hx1021_firmware	< 3.60_tei386m	3.60_tei386m
lenovo	thinkagile_hx1320_firmware	< 8.40-cdi394n	8.40-cdi394n
lenovo	thinkagile_hx1321_firmware	< 8.40-cdi394n	8.40-cdi394n
lenovo	thinkagile_hx1520-r_firmware	< 8.40-cdi394n	8.40-cdi394n
lenovo	thinkagile_hx1521-r_firmware	< 8.40-cdi394n	8.40-cdi394n
lenovo	thinkagile_hx2320-e_firmware	< 8.40-cdi394n	8.40-cdi394n
lenovo	thinkagile_hx2321_firmware	< 8.40-cdi394n	8.40-cdi394n
lenovo	thinkagile_hx2720-e_firmware	< 5.20_tei3c8m	5.20_tei3c8m
lenovo	thinkagile_hx3320_firmware	< 8.40-cdi394n	8.40-cdi394n
lenovo	thinkagile_hx3321_firmware	< 8.40-cdi394n	8.40-cdi394n
lenovo	thinkagile_hx3375_firmware	< 4.10_d8bt38l	4.10_d8bt38l
lenovo	thinkagile_hx3376_firmware	< 4.10_d8bt38l	4.10_d8bt38l
lenovo	thinkagile_hx3520-g_firmware	< 8.40-cdi394n	8.40-cdi394n
lenovo	thinkagile_hx3521-g_firmware	< 8.40-cdi394n	8.40-cdi394n
lenovo	thinkagile_hx3720_firmware	< 5.20_tei3c8m	5.20_tei3c8m
lenovo	thinkagile_hx3721_firmware	< 5.20_tei3c8m	5.20_tei3c8m
lenovo	thinkagile_hx5520-c_firmware	< 8.40-cdi394n	8.40-cdi394n
lenovo	thinkagile_hx5520_firmware	< 8.40-cdi394n	8.40-cdi394n
lenovo	thinkagile_hx5521-c_firmware	< 8.40-cdi394n	8.40-cdi394n
lenovo	thinkagile_hx5521_firmware	< 8.40-cdi394n	8.40-cdi394n
lenovo	thinkagile_hx7520_firmware	< 8.40-cdi394n	8.40-cdi394n
lenovo	thinkagile_hx7521_firmware	< 8.40-cdi394n	8.40-cdi394n
lenovo	thinkagile_hx7820_firmware	< 2.50_psi346l	2.50_psi346l
lenovo	thinkagile_hx7821_firmware	< 2.50_psi346l	2.50_psi346l

Stop checking back — get the weekly exploitation signal.

Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.

CWE-184 CWE-697