CVE-2022-34884

High

Description

A buffer overflow exists in the Remote Presence subsystem which can potentially allow valid, authenticated users to cause a recoverable subsystem denial of service.

SeverityHigh
CVSS7.2
Exploit probability—
ProductLenovo Thinkagile Vx3331 Firmware
PublishedJan 30, 2023
First seenJan 30, 2023
Weakness typeCWE-121CWE-121

How to fix

Update
  • lenovo thinkagile_vx3331_firmware1.80_afbt20n or later
  • lenovo thinkagile_hx_enclosure_certified_node_firmware5.20_tei3c8m or later
  • lenovo thinkagile_hx1021_firmware3.60_tei386m or later
  • lenovo thinkagile_hx1320_firmware8.40-cdi394n or later
  • lenovo thinkagile_hx1321_firmware8.40-cdi394n or later
  • lenovo thinkagile_hx1520-r_firmware8.40-cdi394n or later
  • lenovo thinkagile_hx1521-r_firmware8.40-cdi394n or later
  • lenovo thinkagile_hx2320-e_firmware8.40-cdi394n or later
  • lenovo thinkagile_hx2321_firmware8.40-cdi394n or later
  • lenovo thinkagile_hx2720-e_firmware5.20_tei3c8m or later
  • lenovo thinkagile_hx3320_firmware8.40-cdi394n or later
  • lenovo thinkagile_hx3321_firmware8.40-cdi394n or later

Affected products

ProductAffected versionsFixed in
lenovo thinkagile_vx3331_firmwarev < 1.80_afbt20n1.80_afbt20n
lenovo thinkagile_hx_enclosure_certified_node_firmwarev < 5.20_tei3c8m5.20_tei3c8m
lenovo thinkagile_hx1021_firmwarev < 3.60_tei386m3.60_tei386m
lenovo thinkagile_hx1320_firmwarev < 8.40-cdi394n8.40-cdi394n
lenovo thinkagile_hx1321_firmwarev < 8.40-cdi394n8.40-cdi394n
lenovo thinkagile_hx1520-r_firmwarev < 8.40-cdi394n8.40-cdi394n
lenovo thinkagile_hx1521-r_firmwarev < 8.40-cdi394n8.40-cdi394n
lenovo thinkagile_hx2320-e_firmwarev < 8.40-cdi394n8.40-cdi394n
lenovo thinkagile_hx2321_firmwarev < 8.40-cdi394n8.40-cdi394n
lenovo thinkagile_hx2720-e_firmwarev < 5.20_tei3c8m5.20_tei3c8m
lenovo thinkagile_hx3320_firmwarev < 8.40-cdi394n8.40-cdi394n
lenovo thinkagile_hx3321_firmwarev < 8.40-cdi394n8.40-cdi394n
lenovo thinkagile_hx3375_firmwarev < 4.10_d8bt38l4.10_d8bt38l
lenovo thinkagile_hx3376_firmwarev < 4.10_d8bt38l4.10_d8bt38l
lenovo thinkagile_hx3520-g_firmwarev < 8.40-cdi394n8.40-cdi394n
lenovo thinkagile_hx3521-g_firmwarev < 8.40-cdi394n8.40-cdi394n
lenovo thinkagile_hx3720_firmwarev < 5.20_tei3c8m5.20_tei3c8m
lenovo thinkagile_hx3721_firmwarev < 5.20_tei3c8m5.20_tei3c8m
lenovo thinkagile_hx5520_firmwarev < 8.40-cdi394n8.40-cdi394n
lenovo thinkagile_hx5520-c_firmwarev < 8.40-cdi394n8.40-cdi394n
lenovo thinkagile_hx5521_firmwarev < 8.40-cdi394n8.40-cdi394n
lenovo thinkagile_hx5521-c_firmwarev < 8.40-cdi394n8.40-cdi394n
lenovo thinkagile_hx7520_firmwarev < 8.40-cdi394n8.40-cdi394n
lenovo thinkagile_hx7521_firmwarev < 8.40-cdi394n8.40-cdi394n
lenovo thinkagile_hx7820_firmwarev < 2.50_psi346l2.50_psi346l
lenovo thinkagile_hx7821_firmwarev < 2.50_psi346l2.50_psi346l
lenovo thinkagile_mx1020_firmwarev ≤ 3.60_tei386m—
lenovo thinkagile_mx3330-f_firmwarev < 1.80_afbt20n1.80_afbt20n
lenovo thinkagile_mx3330-h_firmwarev < 1.80_afbt20n1.80_afbt20n
lenovo thinkagile_mx3331-f_firmwarev < 1.80_afbt20n1.80_afbt20n
lenovo thinkagile_mx3331-h_firmwarev < 1.80_afbt20n1.80_afbt20n
lenovo thinkagile_mx3530_f_firmwarev < 1.80_afbt20n1.80_afbt20n
lenovo thinkagile_mx3530-h_firmwarev < 1.80_afbt20n1.80_afbt20n
lenovo thinkagile_mx3531-f_firmwarev < 1.80_afbt20n1.80_afbt20n
lenovo thinkagile_mx3531_h_firmwarev < 1.80_afbt20n1.80_afbt20n
lenovo thinkagile_mx1021_firmwarev < 3.60_tei386m3.60_tei386m
lenovo thinkagile_vx_1se_certified_node_firmwarev < 5.20_tei3c8m5.20_tei3c8m
lenovo thinkagile_vx_2u4n_firmwarev < 5.20_tei3c8m5.20_tei3c8m
lenovo thinkagile_vx_4u_firmwarev < 2.50_psi346l2.50_psi346l
lenovo thinkagile_vx1320_firmwarev < 5.20_tei3c8m5.20_tei3c8m
lenovo thinkagile_vx2320_firmwarev < 8.40-cdi394n8.40-cdi394n
lenovo thinkagile_vx2330_firmwarev < 1.80_afbt20n1.80_afbt20n
lenovo thinkagile_vx3320_firmwarev < 8.40-cdi394n8.40-cdi394n
lenovo thinkagile_vx3330_firmwarev < 1.80_afbt20n1.80_afbt20n
lenovo thinkagile_vx3520-g_firmwarev < 8.40-cdi394n8.40-cdi394n
lenovo thinkagile_vx3530-g_firmwarev < 1.80_afbt20n1.80_afbt20n
lenovo thinkagile_vx3720_firmwarev < 5.20_tei3c8m5.20_tei3c8m
lenovo thinkagile_vx5520_firmwarev < 8.40-cdi394n8.40-cdi394n
lenovo thinkagile_vx5530_firmwarev < 1.80_afbt20n1.80_afbt20n
lenovo thinkagile_vx7320_n_firmwarev < 8.40-cdi394n8.40-cdi394n
lenovo thinkagile_vx7330_firmwarev < 1.80_afbt20n1.80_afbt20n
lenovo thinkagile_vx7520_firmwarev < 8.40-cdi394n8.40-cdi394n
lenovo thinkagile_vx7520_n_firmwarev < 8.40-cdi394n8.40-cdi394n
lenovo thinkagile_vx7530_firmwarev < 1.80_afbt20n1.80_afbt20n
lenovo thinkagile_vx7531_firmwarev < 1.80_afbt20n1.80_afbt20n
lenovo thinkagile_vx7820_firmwarev < 2.50_psi346l2.50_psi346l
lenovo thinkedge_se450_firmwarev < 1.10_usx304w1.10_usx304w
lenovo thinkstation_p920_firmwarev < 8.40-cdi394n8.40-cdi394n
lenovo thinksystem_sd530_firmwarev < 5.20_tei3c8m5.20_tei3c8m
lenovo thinksystem_sd630_v2_firmwarev < 2.00_tgbt36o2.00_tgbt36o
lenovo thinksystem_sd650_dwc_firmwarev < 5.20_tei3c8m5.20_tei3c8m
lenovo thinksystem_sd650_v2_firmwarev < 2.00_tgbt36o2.00_tgbt36o
lenovo thinksystem_sd650-n_v2_firmwarev < 2.00_tgbt36o2.00_tgbt36o
lenovo thinksystem_se350_firmwarev < 3.60_tei386m3.60_tei386m
lenovo thinksystem_sn550_firmwarev < 5.20_tei3c8m5.20_tei3c8m
lenovo thinksystem_sn550_v2_firmwarev < 2.00_tgbt36o2.00_tgbt36o
lenovo thinksystem_sn850_firmwarev < 5.20_tei3c8m5.20_tei3c8m
lenovo thinksystem_sr150_firmwarev < 5.20_tei3c8m5.20_tei3c8m
lenovo thinksystem_sr158_firmwarev < 5.20_tei3c8m5.20_tei3c8m
lenovo thinksystem_sr250_firmwarev < 5.20_tei3c8m5.20_tei3c8m
lenovo thinksystem_sr250_v2_firmwarev < 1.96_tgbt34x1.96_tgbt34x
lenovo thinksystem_sr258_firmwarev < 5.20_tei3c8m5.20_tei3c8m
lenovo thinksystem_sr258_v2_firmwarev < 1.96_tgbt34x1.96_tgbt34x
lenovo thinksystem_sr530_firmwarev < 8.40-cdi394n8.40-cdi394n
lenovo thinksystem_sr550_firmwarev < 8.40-cdi394n8.40-cdi394n
lenovo thinksystem_sr570_firmwarev < 8.40-cdi394n8.40-cdi394n
lenovo thinksystem_sr590_firmwarev < 8.40-cdi394n8.40-cdi394n
lenovo thinksystem_sr630_firmwarev < 8.40-cdi394n8.40-cdi394n
lenovo thinksystem_sr630_v2_firmwarev < 1.80_afbt20n1.80_afbt20n
lenovo thinksystem_sr645_firmwarev < 4.10_d8bt38l4.10_d8bt38l
lenovo thinksystem_sr650_firmwarev < 8.40-cdi394n8.40-cdi394n
lenovo thinksystem_sr650_v2_firmwarev < 1.80_afbt20n1.80_afbt20n
lenovo thinksystem_sr665_firmwarev < 4.10_d8bt38l4.10_d8bt38l
lenovo thinksystem_sr670_firmwarev < 3.60_tei386m3.60_tei386m
lenovo thinksystem_sr670_v2_firmwarev < 2.00_tgbt36o2.00_tgbt36o
lenovo thinksystem_sr850_firmwarev < 5.20_tei3c8m5.20_tei3c8m
lenovo thinksystem_sr850_v2_firmwarev < 2.00_tgbt36o2.00_tgbt36o
lenovo thinksystem_sr850p_firmwarev < 3.60_tei386m3.60_tei386m
lenovo thinksystem_sr860_firmwarev < 5.20_tei3c8m5.20_tei3c8m
lenovo thinksystem_sr860_v2_firmwarev < 2.00_tgbt36o2.00_tgbt36o
lenovo thinksystem_sr950_firmwarev < 2.50_psi346l2.50_psi346l
lenovo thinksystem_st250_firmwarev < 5.20_tei3c8m5.20_tei3c8m
lenovo thinksystem_st250_v2_firmwarev < 1.96_tgbt34x1.96_tgbt34x
lenovo thinksystem_st258_firmwarev < 5.20_tei3c8m5.20_tei3c8m
lenovo thinksystem_st258_v2_firmwarev < 1.96_tgbt34x1.96_tgbt34x
lenovo thinksystem_st550_firmwarev < 8.40-cdi394n8.40-cdi394n
lenovo thinksystem_st650_v2_firmwarev < 2.00_tgbt36o2.00_tgbt36o
lenovo thinksystem_st658_v2_firmwarev < 2.00_tgbt36o2.00_tgbt36o

Check your version

Choose the product and enter the version you run to see whether it falls in the affected range.

In the Intelligence 360 plan

Attack Surface Management

See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.

CVE-2022-34884 · Lenovo Thinkagile Vx3331 Firmware · Dark Radar