VulnSocial

CVE-2024-38508

LOWCVSS 7.2 · HIGH

Signal is active with 1 mentions in latest observed window

Immediate actions

  • Track advisory updates for patch or workaround availability

Recommended action window: Monitor and triage in normal cycle

NVD description

A privilege escalation vulnerability was discovered in the web interface or SSH captive command shell interface of XCC that could allow an authenticated XCC user with elevated privileges to perform command injection via a specially crafted request.

Back to dashboard
0.0/ 10 priority

Sources & remediation

Other references
Weakness type (CWE)
CWE-78

Priority

LOW

Exploitation

NONE

PoC

NONE

Patch

NONE

Momentum

NONE

Threat summary

  • 1 mentions across 1 observed day

What's happening

  • 1 total mentions across 1 day

Deep dive

Activity timeline1 mentions / 1d
00111Mentions · 2026-09-23: 109-23
Referenced assets1 URL
By indicator
Full discourse1 post
  • runZero, Inc.@runZeroInc

    What happens when research uncovers an N-day vulnerability? Tod Beardsley breaks down the rediscovery of CVE-2024-38508 (root privilege escalation in Lenovo XCC2) from runZero’s LightsOut project presented at Black Hat and DEF CON. 👉 Read the post: https://www.runzero.com/blog/cve-2024-38508-lenovo/ https://t.co/YymlyCY4P9

    0000081
    2.5K followersView on X

Explore more

Back to dashboard