CVE-2022-34888: low-severity vulnerability in Lenovo XClarity Controller
Published · Updated
E-mail alert when it lands in KEV, gets a public PoC or its score goes up.
8Vexday Risk Score
No sign of exploitation. No public exploitation artifact known so far.
ssvc Trackcvss 2.7epss 0.4%
The Remote Mount feature can potentially be abused by valid, authenticated users to make connections to internal services that may not normally be accessible to users. Internal service access controls, as applicable, remain in effect.
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:L
Affected products
Lenovo · Lenovo XClarity ControllerRelated CVEs — Lenovo XClarity Controller
In the same product, most dangerous first.