← Vulnerability feed

Vulnerability record · CVE-2023-25495 · published 28 April 2023

CVE-2023-25495: Lenovo thinkagile hx5530 firmware insufficiently protected credentials vulnerability

Lenovo · Thinkagile Hx5530 Firmware

A valid, authenticated administrative user can query a web interface API to reveal the configured LDAP client password used by XCC to authenticate to an external LDAP server in certain configurations. There is no exposure where no LDAP client password is configured

4.9 CVSS 3.1 Medium EPSS 0.57% · top 54.2% CWE-522 · Insufficiently protected credentials
4.9CVSS 3.1 base score
0.57%EPSS exploitation probability, 30 days
NoNot in CISA KEV
109Affected product versions listed by NVD
2References
17 Jun 2026Last modified by NVD

Description

A valid, authenticated administrative user can query a web interface API to reveal the configured LDAP client password used by XCC to authenticate to an external LDAP server in certain configurations. There is no exposure where no LDAP client password is configured

CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N

Affected products

109 vulnerable configurations from NVD's CPE data, grouped by vendor and product.

References

LinkTags
https://support.lenovo.com/us/en/product_security/LEN-99936 Vendor Advisory
https://support.lenovo.com/us/en/product_security/LEN-99936 Vendor Advisory

Track CVE-2023-25495 inside VULONE

Watch it alongside the ransomware crews, C2 infrastructure and forum chatter that reference it, query it through the API and pull it into your SIEM over TAXII.

Start free Open in platform

Related vulnerabilities

Same products first, then exploited flaws of the same weakness class.

8.8CVE-2023-4607Lenovo thinkagile hx5530 firmware improper privilege management vulnerabilityAn authenticated XCC user can change permissions for any user through a crafted API command.EPSS 0.52%8.8CVE-2023-0683Lenovo thinkagile hx5530 firmware improper input validation vulnerabilityA valid, authenticated XCC user with read only access may gain elevated privileges through a specifically crafted API call.EPSS 0.57%8.8CVE-2023-25492Lenovo thinkagile hx5530 firmware vulnerabilityA valid, authenticated user may be able to trigger a denial of service of the XCC web user interface or other undefined behavior through a format str…EPSS 0.51%8.8CVE-2023-29057Lenovo thinkagile hx5530 firmware incorrect default permissions vulnerabilityA valid XCC user's local account permissions overrides their active directory permissions under specific configurations. This could lead to a privile…EPSS 0.50%8.1CVE-2023-4606Lenovo thinkagile hx5530 firmware missing authorization vulnerabilityAn authenticated XCC user with Read-Only permission can change a different user’s password through a crafted API command.   This affects ThinkSystem …EPSS 0.55%7.2CVE-2024-2659Lenovo nextscale n1200 enclosure firmware os command injection vulnerabilityA command injection vulnerability was identified in SMM/SMM2 and FPC that could allow an authenticated user with elevated privileges to execute syste…EPSS 1.1%7.2CVE-2023-4608Lenovo thinkagile hx5530 firmware sql injection vulnerabilityAn authenticated XCC user with elevated privileges can perform blind SQL injection in limited cases through a crafted API command.  This affects Thin…EPSS 0.40%6.5CVE-2023-29058Lenovo thinkagile hx5530 firmware incorrect default permissions vulnerabilityA valid, authenticated XCC user with read-only permissions can modify custom user roles on other user accounts and the user trespass message through …EPSS 0.36%

Source: NIST National Vulnerability Database (record CVE-2023-25495), CISA KEV, FIRST EPSS (scores of 2026-10-17). This page is refreshed as NVD updates the record.