CVE-2024-38508, an N-day story - runZero Research
ID: a071b686-2b11-508d-b588-1892f20235a1
STIX ID: report--a071b686-2b11-508d-b588-1892f20235a1
Feed Name: runZero Blog
The runZero LightsOut research rediscovered an authenticated command-injection privilege escalation in Lenovo XClarity Controller 2 (XCC2) remote-media mounting that allows an Operator-level user to inject shell metacharacters via the Domain or mount Option fields and execute commands as root. Lenovo indicates this matches CVE-2024-38508 and was fixed in later firmware, but unpatched BMCs remain at risk; defenders should update firmware, monitor for related indicators, and treat XCC2 devices as high-value targets for compromise.
Your team is not currently subscribed to this feed. You must subscribe to it in order to see this post.