How severe is CVE-2017-3770?

High severity. CVSS v3 base score is 8.8 out of 10.

Vulnerability in Lenovo Xclarity_administrator

CVE-2017-3770

Privilege escalation vulnerability in LXCA versions earlier than 1.3.2 where an authenticated user may be able to abuse certain web interface functionality to execute privileged commands within the underlying LXCA operating system.

EPSS: 0.010 (59.5th percentile) — read the EPSS interpretation.

CVSS v3 metric

CVSS v3 base score 8.8 (High). Vector: CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H.

Affected products

Lenovo Xclarity_administrator
Lenovo Group Ltd. Xclarity Administrator (Lxca) — versions Earlier than 1.3.2

References

psirt@lenovo.com (x_refsource_CONFIRM, Vendor Advisory)

Frequently asked questions

What is CVE-2017-3770?: CVE-2017-3770 is a high-severity vulnerability in Lenovo Xclarity_administrator. CVSS score: 8.8/10. Published 2017-09-22.
How severe is CVE-2017-3770?: High severity. CVSS v3 base score is 8.8 out of 10.