{"id":69981,"date":"2025-09-12T00:32:02","date_gmt":"2025-09-11T21:02:02","guid":{"rendered":"https:\/\/afaghhosting.net\/blog\/cve-2025-8557-lenovo-xclarity-orchestrator-local-privilege-escalation\/"},"modified":"2025-09-12T00:32:02","modified_gmt":"2025-09-11T21:02:02","slug":"cve-2025-8557-lenovo-xclarity-orchestrator-local-privilege-escalation","status":"publish","type":"post","link":"https:\/\/afaghhosting.net\/blog\/cve-2025-8557-lenovo-xclarity-orchestrator-local-privilege-escalation\/","title":{"rendered":"CVE-2025-8557 &#8211; Lenovo XClarity Orchestrator Local Privilege Escalation"},"content":{"rendered":"<p><strong>CVE ID : <\/strong>CVE-2025-8557<br \/>\n<br \/>\n<strong>Published : <\/strong> Sept. 11, 2025, 7:15 p.m. | 1\u00a0hour, 27\u00a0minutes ago<br \/>\n<br \/>\n<strong>Description : <\/strong>An internal product security audit of Lenovo XClarity Orchestrator (LXCO) discovered the below vulnerability:<\/p>\n<p>An attacker with access to a device on the local Lenovo XClarity Orchestrator (LXCO) network segment may be able to manipulate the local device to create an alternate communication channel which could allow the attacker, under certain conditions, to directly interact with backend LXCO API services typically inaccessible to users. While access controls may limit the scope of interaction, this could result in unauthorized access to internal functionality or data. This issue is not exploitable from remote networks.<br \/>\n<br \/>\n<strong>Severity:<\/strong> 8.8 | HIGH<br \/>\n<br \/>\nVisit the link for more details, such as CVSS details, affected products, timeline, and more&#8230;<\/p>\n","protected":false},"excerpt":{"rendered":"<p>CVE ID : CVE-2025-8557 Published : Sept. 11, 2025, 7:15 p.m. | 1\u00a0hour, 27\u00a0minutes ago Description : An internal product security audit of Lenovo XClarity Orchestrator (LXCO) discovered the below vulnerability: An attacker with access to a device on the local Lenovo XClarity Orchestrator (LXCO) network segment may be able to manipulate the local device &hellip;<\/p>\n","protected":false},"author":1,"featured_media":0,"comment_status":"closed","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[26],"tags":[],"class_list":["post-69981","post","type-post","status-publish","format-standard","hentry","category-vulnerability"],"_links":{"self":[{"href":"https:\/\/afaghhosting.net\/blog\/wp-json\/wp\/v2\/posts\/69981","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/afaghhosting.net\/blog\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/afaghhosting.net\/blog\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/afaghhosting.net\/blog\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/afaghhosting.net\/blog\/wp-json\/wp\/v2\/comments?post=69981"}],"version-history":[{"count":0,"href":"https:\/\/afaghhosting.net\/blog\/wp-json\/wp\/v2\/posts\/69981\/revisions"}],"wp:attachment":[{"href":"https:\/\/afaghhosting.net\/blog\/wp-json\/wp\/v2\/media?parent=69981"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/afaghhosting.net\/blog\/wp-json\/wp\/v2\/categories?post=69981"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/afaghhosting.net\/blog\/wp-json\/wp\/v2\/tags?post=69981"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}