cve/2024/CVE-2024-8280.md

### [CVE-2024-8280](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-8280)
![](https://img.shields.io/static/v1?label=Product&message=HX%20Enclosure%20Certified%20Node%20(ThinkAgile)%20XCC&color=blue)
![](https://img.shields.io/static/v1?label=Product&message=HX1021%20Edge%20Certified%20Node%203yr%20(ThinkAgile)%20XCC&color=blue)
![](https://img.shields.io/static/v1?label=Product&message=HX1320%20Appliance%20(ThinkAgile)%20XCC&color=blue)
![](https://img.shields.io/static/v1?label=Product&message=HX1321%20Certified%20Node%20(ThinkAgile)%20XCC&color=blue)
![](https://img.shields.io/static/v1?label=Product&message=HX1331%20Certified%20Node%20(ThinkAgile)%20XCC&color=blue)
![](https://img.shields.io/static/v1?label=Product&message=HX1520-R%20Appliance%20(ThinkAgile)%20XCC&color=blue)
![](https://img.shields.io/static/v1?label=Product&message=HX1521-R%20Certified%20Node%20(ThinkAgile)%20XCC&color=blue)
![](https://img.shields.io/static/v1?label=Product&message=HX2320-E%20Appliance%20(ThinkAgile)%20XCC&color=blue)
![](https://img.shields.io/static/v1?label=Product&message=HX2321%20Certified%20Node%20(ThinkAgile)%20XCC&color=blue)
![](https://img.shields.io/static/v1?label=Product&message=HX2330%20Appliance%20(ThinkAgile)%20XCC&color=blue)
![](https://img.shields.io/static/v1?label=Product&message=HX2331%20Certified%20Node%20(ThinkAgile)%20XCC&color=blue)
![](https://img.shields.io/static/v1?label=Product&message=HX2720-E%20Appliance%20(ThinkAgile)%20XCC&color=blue)
![](https://img.shields.io/static/v1?label=Product&message=HX3320%20Appliance%20(ThinkAgile)%20XCC&color=blue)
![](https://img.shields.io/static/v1?label=Product&message=HX3321%20Certified%20Node%20(ThinkAgile)%20XCC&color=blue)
![](https://img.shields.io/static/v1?label=Product&message=HX3330%20Appliance%20(ThinkAgile)%20XCC&color=blue)
![](https://img.shields.io/static/v1?label=Product&message=HX3331%20Certified%20Node%20(ThinkAgile)%20XCC&color=blue)
![](https://img.shields.io/static/v1?label=Product&message=HX3331%20Node%20SAP%20HANA%20(ThinkAgile)%20XCC&color=blue)
![](https://img.shields.io/static/v1?label=Product&message=HX3375%20Appliance%20(ThinkAgile)%20XCC&color=blue)
![](https://img.shields.io/static/v1?label=Product&message=HX3376%20Certified%20Node%20(ThinkAgile)%20XCC&color=blue)
![](https://img.shields.io/static/v1?label=Product&message=HX3520-G%20Appliance%20(ThinkAgile)%20XCC&color=blue)
![](https://img.shields.io/static/v1?label=Product&message=HX3521-G%20Certified%20Node%20(ThinkAgile)%20XCC&color=blue)
![](https://img.shields.io/static/v1?label=Product&message=HX3720%20Appliance%20(ThinkAgile)%20XCC&color=blue)
![](https://img.shields.io/static/v1?label=Product&message=HX3721%20Certified%20Node%20(ThinkAgile)%20XCC&color=blue)
![](https://img.shields.io/static/v1?label=Product&message=HX5520%20Appliance%20(ThinkAgile)%20XCC&color=blue)
![](https://img.shields.io/static/v1?label=Product&message=HX5520-C%20Appliance%20(ThinkAgile)%20XCC&color=blue)
![](https://img.shields.io/static/v1?label=Product&message=HX5521%20Certified%20Node%20(ThinkAgile)%20XCC&color=blue)
![](https://img.shields.io/static/v1?label=Product&message=HX5521-C%20Certified%20Node%20(ThinkAgile)%20XCC&color=blue)
![](https://img.shields.io/static/v1?label=Product&message=HX5530%20Appliance%20(ThinkAgile)%20XCC&color=blue)
![](https://img.shields.io/static/v1?label=Product&message=HX5531%20Certified%20Node%20(ThinkAgile)%20XCC&color=blue)
![](https://img.shields.io/static/v1?label=Product&message=HX7520%20Appliance%20(ThinkAgile)%20XCC&color=blue)
![](https://img.shields.io/static/v1?label=Product&message=HX7521%20Certified%20Node%20(ThinkAgile)%20XCC&color=blue)
![](https://img.shields.io/static/v1?label=Product&message=HX7530%20Appl%20for%20SAP%20HANA%20(ThinkAgile)%20XCC&color=blue)
![](https://img.shields.io/static/v1?label=Product&message=HX7530%20Appliance%20(ThinkAgile)%20XCC&color=blue)
![](https://img.shields.io/static/v1?label=Product&message=HX7531%20Certified%20Node%20(ThinkAgile)%20XCC&color=blue)
![](https://img.shields.io/static/v1?label=Product&message=HX7531%20Node%20SAP%20HANA%20(ThinkAgile)%20XCC&color=blue)
![](https://img.shields.io/static/v1?label=Product&message=HX7820%20Appliance%20(ThinkAgile)%20XCC&color=blue)
![](https://img.shields.io/static/v1?label=Product&message=HX7821%20Certified%20Node%20(ThinkAgile)%20XCC&color=blue)
![](https://img.shields.io/static/v1?label=Product&message=MX%20Edge%20Appliance%20-%20MX1020%20(ThinkAgile)%20XCC&color=blue)
![](https://img.shields.io/static/v1?label=Product&message=MX3330-F%20All-flash%20Appliance%20(ThinkAgile)%20XCC&color=blue)
![](https://img.shields.io/static/v1?label=Product&message=MX3330-H%20Hybrid%20Appliance%20(ThinkAgile)%20XCC&color=blue)
![](https://img.shields.io/static/v1?label=Product&message=MX3331-F%20All-flash%20Certified%20node%20(ThinkAgile)%20XCC&color=blue)
![](https://img.shields.io/static/v1?label=Product&message=MX3331-H%20Hybrid%20Certified%20node%20(ThinkAgile)%20XCC&color=blue)
![](https://img.shields.io/static/v1?label=Product&message=MX3530%20F%20All%20flash%20Appliance%20(ThinkAgile)%20XCC&color=blue)
![](https://img.shields.io/static/v1?label=Product&message=MX3530-H%20Hybrid%20Appliance%20(ThinkAgile)%20XCC&color=blue)
![](https://img.shields.io/static/v1?label=Product&message=MX3531%20H%20Hybrid%20Certified%20node%20(ThinkAgile)%20XCC&color=blue)
![](https://img.shields.io/static/v1?label=Product&message=MX3531-F%20All-flash%20Certified%20node%20(ThinkAgile)%20XCC&color=blue)
![](https://img.shields.io/static/v1?label=Product&message=P920%20Rack%20Workstation%20(ThinkStation)%20XCC&color=blue)
![](https://img.shields.io/static/v1?label=Product&message=SD530%20(ThinkSystem)%20XCC&color=blue)
![](https://img.shields.io/static/v1?label=Product&message=SD530%20V3%20(ThinkSystem)%20XCC&color=blue)
![](https://img.shields.io/static/v1?label=Product&message=SD550%20V3%20(ThinkSystem)%20XCC&color=blue)
![](https://img.shields.io/static/v1?label=Product&message=SD630%20V2%20(ThinkSystem)%20XCC&color=blue)
![](https://img.shields.io/static/v1?label=Product&message=SD650%20DWC%20Dual%20Node%20Tray%20(ThinkSystem)%20XCC&color=blue)
![](https://img.shields.io/static/v1?label=Product&message=SD650%20V2%20(ThinkSystem)%20XCC&color=blue)
![](https://img.shields.io/static/v1?label=Product&message=SD650%20V3%20(ThinkSystem)%20XCC&color=blue)
![](https://img.shields.io/static/v1?label=Product&message=SD650-N%20V2%20(ThinkSystem)%20XCC&color=blue)
![](https://img.shields.io/static/v1?label=Product&message=SD665%20V3%20(ThinkSystem)%20XCC&color=blue)
![](https://img.shields.io/static/v1?label=Product&message=SE350%20(ThinkSystem)%20XCC&color=blue)
![](https://img.shields.io/static/v1?label=Product&message=SE350%20V2%20(ThinkEdge)%20XCC&color=blue)
![](https://img.shields.io/static/v1?label=Product&message=SE360%20V2%20(ThinkEdge)%20XCC&color=blue)
![](https://img.shields.io/static/v1?label=Product&message=SE450%20(ThinkEdge)%20XCC&color=blue)
![](https://img.shields.io/static/v1?label=Product&message=SE455%20V3%20(ThinkEdge)%20XCC&color=blue)
![](https://img.shields.io/static/v1?label=Product&message=SN550%20(ThinkSystem)%20XCC&color=blue)
![](https://img.shields.io/static/v1?label=Product&message=SN550%20V2%20(ThinkSystem)%20XCC&color=blue)
![](https://img.shields.io/static/v1?label=Product&message=SN850%20(ThinkSystem)%20XCC&color=blue)
![](https://img.shields.io/static/v1?label=Product&message=SR150%20(ThinkSystem)%20XCC&color=blue)
![](https://img.shields.io/static/v1?label=Product&message=SR158%20(ThinkSystem)%20XCC&color=blue)
![](https://img.shields.io/static/v1?label=Product&message=SR250%20(ThinkSystem)%20XCC&color=blue)
![](https://img.shields.io/static/v1?label=Product&message=SR250%20V2%20(ThinkSystem)%20XCC&color=blue)
![](https://img.shields.io/static/v1?label=Product&message=SR250%20V3%20(ThinkSystem)%20XCC&color=blue)
![](https://img.shields.io/static/v1?label=Product&message=SR258%20(ThinkSystem)%20XCC&color=blue)
![](https://img.shields.io/static/v1?label=Product&message=SR258%20V2%20(ThinkSystem)%20XCC&color=blue)
![](https://img.shields.io/static/v1?label=Product&message=SR258%20V3%20(ThinkSystem)%20XCC&color=blue)
![](https://img.shields.io/static/v1?label=Product&message=SR530%20(ThinkSystem)%20XCC&color=blue)
![](https://img.shields.io/static/v1?label=Product&message=SR550%20(ThinkSystem)%20XCC&color=blue)
![](https://img.shields.io/static/v1?label=Product&message=SR570%20%20(ThinkSystem)%20XCC&color=blue)
![](https://img.shields.io/static/v1?label=Product&message=SR590%20(ThinkSystem)%20XCC&color=blue)
![](https://img.shields.io/static/v1?label=Product&message=SR630%20%20(ThinkSystem)%20XCC&color=blue)
![](https://img.shields.io/static/v1?label=Product&message=SR630%20V2%20(ThinkSystem)%20XCC&color=blue)
![](https://img.shields.io/static/v1?label=Product&message=SR630%20V3%20(ThinkSystem)%20XCC&color=blue)
![](https://img.shields.io/static/v1?label=Product&message=SR635%20V3%20(ThinkSystem)%20XCC&color=blue)
![](https://img.shields.io/static/v1?label=Product&message=SR645%20(ThinkSystem)%20XCC&color=blue)
![](https://img.shields.io/static/v1?label=Product&message=SR645%20V3%20(ThinkSystem)%20XCC&color=blue)
![](https://img.shields.io/static/v1?label=Product&message=SR650%20%20(ThinkSystem)%20XCC&color=blue)
![](https://img.shields.io/static/v1?label=Product&message=SR650%20V2%20(ThinkSystem)%20XCC&color=blue)
![](https://img.shields.io/static/v1?label=Product&message=SR650%20V3%20(ThinkSystem)%20XCC&color=blue)
![](https://img.shields.io/static/v1?label=Product&message=SR655%20V3%20(ThinkSystem)%20XCC&color=blue)
![](https://img.shields.io/static/v1?label=Product&message=SR665%20(ThinkSystem)%20XCC&color=blue)
![](https://img.shields.io/static/v1?label=Product&message=SR665%20V3%20(ThinkSystem)%20XCC&color=blue)
![](https://img.shields.io/static/v1?label=Product&message=SR670%20(ThinkSystem)%20XCC&color=blue)
![](https://img.shields.io/static/v1?label=Product&message=SR670%20V2%20(ThinkSystem)%20XCC&color=blue)
![](https://img.shields.io/static/v1?label=Product&message=SR675%20V3%20(ThinkSystem)%20XCC&color=blue)
![](https://img.shields.io/static/v1?label=Product&message=SR850%20(ThinkSystem)%20XCC&color=blue)
![](https://img.shields.io/static/v1?label=Product&message=SR850%20V2%20(ThinkSystem)%20XCC&color=blue)
![](https://img.shields.io/static/v1?label=Product&message=SR850%20V3%20(ThinkSystem)%20XCC&color=blue)
![](https://img.shields.io/static/v1?label=Product&message=SR850P%20(ThinkSystem)%20XCC&color=blue)
![](https://img.shields.io/static/v1?label=Product&message=SR860%20(ThinkSystem)%20XCC&color=blue)
![](https://img.shields.io/static/v1?label=Product&message=SR860%20V2%20(ThinkSystem)%20XCC&color=blue)
![](https://img.shields.io/static/v1?label=Product&message=SR860%20V3%20(ThinkSystem)%20XCC&color=blue)
![](https://img.shields.io/static/v1?label=Product&message=SR950%20(ThinkSystem)%20XCC&color=blue)
![](https://img.shields.io/static/v1?label=Product&message=SR950%20V3%20(ThinkSystem)%20XCC&color=blue)
![](https://img.shields.io/static/v1?label=Product&message=ST250%20(ThinkSystem)%20XCC&color=blue)
![](https://img.shields.io/static/v1?label=Product&message=ST250%20V2%20(ThinkSystem)%20XCC&color=blue)
![](https://img.shields.io/static/v1?label=Product&message=ST250%20V3%20(ThinkSystem)%20XCC&color=blue)
![](https://img.shields.io/static/v1?label=Product&message=ST258%20(ThinkSystem)%20XCC&color=blue)
![](https://img.shields.io/static/v1?label=Product&message=ST258%20V2%20(ThinkSystem)%20XCC&color=blue)
![](https://img.shields.io/static/v1?label=Product&message=ST258%20V3%20(ThinkSystem)%20XCC&color=blue)
![](https://img.shields.io/static/v1?label=Product&message=ST550%20(ThinkSystem)%20XCC&color=blue)
![](https://img.shields.io/static/v1?label=Product&message=ST650%20V2%20(ThinkSystem)%20XCC&color=blue)
![](https://img.shields.io/static/v1?label=Product&message=ST650%20V3%20(ThinkSystem)%20XCC&color=blue)
![](https://img.shields.io/static/v1?label=Product&message=ST658%20V2%20(ThinkSystem)%20XCC&color=blue)
![](https://img.shields.io/static/v1?label=Product&message=ST658%20V3%20(ThinkSystem)%20XCC&color=blue)
![](https://img.shields.io/static/v1?label=Product&message=ThinkAgile%20MX1021%20on%20SE350%20XCC&color=blue)
![](https://img.shields.io/static/v1?label=Product&message=VX%201SE%20Certified%20Node%20(ThinkAgile)%20XCC&color=blue)
![](https://img.shields.io/static/v1?label=Product&message=VX%202U4N%20Certified%20Node%20(ThinkAgile)%20XCC&color=blue)
![](https://img.shields.io/static/v1?label=Product&message=VX%204U%20Certified%20Node%20(ThinkAgile)%20XCC&color=blue)
![](https://img.shields.io/static/v1?label=Product&message=VX1320%20(ThinkAgile)%20XCC&color=blue)
![](https://img.shields.io/static/v1?label=Product&message=VX2320%20(ThinkAgile)%20XCC&color=blue)
![](https://img.shields.io/static/v1?label=Product&message=VX2330%20Appliance%20(ThinkAgile)%20XCC&color=blue)
![](https://img.shields.io/static/v1?label=Product&message=VX3320%20(ThinkAgile)%20XCC&color=blue)
![](https://img.shields.io/static/v1?label=Product&message=VX3330%20Appliance%20(ThinkAgile)%20XCC&color=blue)
![](https://img.shields.io/static/v1?label=Product&message=VX3331%20Certified%20Node%20(ThinkAgile)%20XCC&color=blue)
![](https://img.shields.io/static/v1?label=Product&message=VX3520-G%20(ThinkAgile)%20XCC&color=blue)
![](https://img.shields.io/static/v1?label=Product&message=VX3530-G%20Appliance%20(ThinkAgile)%20XCC&color=blue)
![](https://img.shields.io/static/v1?label=Product&message=VX3720%20(ThinkAgile)%20XCC&color=blue)
![](https://img.shields.io/static/v1?label=Product&message=VX5520%20(ThinkAgile)%20XCC&color=blue)
![](https://img.shields.io/static/v1?label=Product&message=VX5530%20Appliance%20(ThinkAgile)%20XCC&color=blue)
![](https://img.shields.io/static/v1?label=Product&message=VX635%20V3%20Integrated%20System%20(ThinkAgile)%20XCC&color=blue)
![](https://img.shields.io/static/v1?label=Product&message=VX645%20V3%20Certified%20Node%20(ThinkAgile)%20XCC&color=blue)
![](https://img.shields.io/static/v1?label=Product&message=VX645%20V3%20Integrated%20System%20(ThinkAgile)%20XCC&color=blue)
![](https://img.shields.io/static/v1?label=Product&message=VX655%20V3%20Certified%20Node%20(ThinkAgile)%20XCC&color=blue)
![](https://img.shields.io/static/v1?label=Product&message=VX655%20V3%20Integrated%20System%20(ThinkAgile)%20XCC&color=blue)
![](https://img.shields.io/static/v1?label=Product&message=VX665%20V3%20Certified%20Node%20(ThinkAgile)%20XCC&color=blue)
![](https://img.shields.io/static/v1?label=Product&message=VX665%20V3%20Integrated%20System%20(ThinkAgile)%20XCC&color=blue)
![](https://img.shields.io/static/v1?label=Product&message=VX7320%20N%20(ThinkAgile)%20XCC&color=blue)
![](https://img.shields.io/static/v1?label=Product&message=VX7330%20Appliance%20(Thinkagile)%20XCC&color=blue)
![](https://img.shields.io/static/v1?label=Product&message=VX7520%20(ThinkAgile)%20XCC&color=blue)
![](https://img.shields.io/static/v1?label=Product&message=VX7520%20N%20(ThinkAgile)%20XCC&color=blue)
![](https://img.shields.io/static/v1?label=Product&message=VX7530%20Appliance%20(ThinkAgile)%20XCC&color=blue)
![](https://img.shields.io/static/v1?label=Product&message=VX7531%20Certified%20Node%20(ThinkAgile)%20XCC&color=blue)
![](https://img.shields.io/static/v1?label=Product&message=VX7820%20(ThinkAgile)%20XCC&color=blue)
![](https://img.shields.io/static/v1?label=Version&message=0%20&color=brightgreen)
![](https://img.shields.io/static/v1?label=Vulnerability&message=CWE-78%20Improper%20Neutralization%20of%20Special%20Elements%20used%20in%20an%20OS%20Command%20('OS%20Command%20Injection')&color=brightgreen)

### Description

An input validation weakness was discovered in XCC that could allow a valid, authenticated XCC user with elevated privileges to perform command injection or cause a recoverable denial of service using a specially crafted file.

### POC

#### Reference
No PoCs from references.

#### Github
- https://github.com/fkie-cad/nvd-json-data-feeds