VulnerabilityModified
CVE-2022-34888
The Remote Mount feature can potentially be abused by valid, authenticated users to make connections to internal services that may not normally be accessible to users.
MEDIUM 4.3EPSS 0.41%
Does this matter?
Lower severity and a low EPSS score (0.41%). Track it; it rarely justifies an emergency change on its own.
Description
The Remote Mount feature can potentially be abused by valid, authenticated users to make connections to internal services that may not normally be accessible to users. Internal service access controls, as applicable, remain in effect.
- CVSS 3.1
- 4.3 MEDIUMCVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N
- EPSS
- 0.41% probability · 35th percentile
- CISA KEV
- Not listed
- Weakness
- CWE-184, CWE-697
- Affected
- lenovo/thinkagile vx3331 firmware · lenovo/thinkagile hx enclosure certified node firmware · lenovo/thinkagile hx1021 firmware · lenovo/thinkagile hx1320 firmware · lenovo/thinkagile hx1321 firmware · lenovo/thinkagile hx1520-r firmware · lenovo/thinkagile hx1521-r firmware · lenovo/thinkagile hx2320-e firmware · lenovo/thinkagile hx2321 firmware · lenovo/thinkagile hx2720-e firmware · lenovo/thinkagile hx3320 firmware · lenovo/thinkagile hx3321 firmware · lenovo/thinkagile hx3375 firmware · lenovo/thinkagile hx3376 firmware · lenovo/thinkagile hx3520-g firmware · lenovo/thinkagile hx3521-g firmware · lenovo/thinkagile hx3720 firmware · lenovo/thinkagile hx3721 firmware · lenovo/thinkagile hx5520 firmware · lenovo/thinkagile hx5520-c firmware · +40 more
- Source
- psirt@lenovo.com
References
- https://support.lenovo.com/us/en/product_security/LEN-87734Vendor Advisory
- https://support.lenovo.com/us/en/product_security/LEN-87734Vendor Advisory
Source: NVD record, EPSS from FIRST.org, KEV from CISA. Refreshed daily.