Affected: Lenovo XClarity Controller, lenovo thinkagile_hx5530_firmware, lenovo thinkagile_hx7530_firmware, lenovo thinkagile_vx3331_firmware, lenovo thinkagile_hx_enclosure_certified_node_firmware, lenovo thinkagile_hx1021_edg_firmware, lenovo thinkagile_hx1320_firmware, lenovo thinkagile_hx1331_firmware, lenovo thinkagile_hx1321_firmware, lenovo thinkagile_hx1520-r_firmware and 101 more

A privilege escalation vulnerability was discovered in XCC that could allow an authenticated XCC user with elevated privileges to perform command injection via specially crafted IPMI commands.