Known vulnerabilities in ThinkSystem SD650 V2

Vendor: Lenovo
Software: ThinkSystem SD650 V2
Software CPE: cpe:2.3:h:lenovo:thinksystem_sd650_v2:*:*:*:*:*:*:*:*
Website: https://www.lenovo.com/
Total vulnerabilities: 15
Public exploits: 0
Known exploited (KEV): 0

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting ThinkSystem SD650 V2 ThinkSystem SD650 V2 is affected by 15 known vulnerabilities: 5 medium, 10 low Critical High Medium Low

Vulnerabilities (15)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU120620 - Out-of-bounds write
CVE-2025-23299		 CWE-787 Low
No
No
 - 29.12.2025 SB2025122912
SB2025122913
SB2026072323
and 1 more
#VU100478 - Improper input validation
CVE-2024-32485		 CWE-20 Low
No
No
 - 14.11.2024 SB2024111421
SB2025010966
SB2025051534
#VU100473 - Insufficient Control Flow Management
CVE-2024-29079		 CWE-691 Low
No
No
 - 14.11.2024 SB2024111421
SB2025010966
SB2025051534
#VU99497 - Permissions, Privileges, and Access Controls
CVE-2024-0106		 CWE-264 Low
No
No
 - 30.10.2024 SB2024103006
SB2025051537
#VU99496 - Permissions, Privileges, and Access Controls
CVE-2024-0105		 CWE-264 Medium
No
No
 - 30.10.2024 SB2024103006
SB2025051537
#VU95180 - Integer overflow
CVE-2022-36765		 CWE-190 Low
No
No
 - 02.08.2024 SB2024080236
SB2024021453
SB2024021639
and 8 more
#VU89083 - Integer overflow
CVE-2022-36763		 CWE-190 Low
No
No
 - 01.05.2024 SB2024011752
SB2024050117
SB2024021453
and 9 more
#VU87737 - Integer overflow
CVE-2022-36764		 CWE-190 Medium
No
No
 - 22.03.2024 SB2024011752
SB2024032253
SB2024032254
and 11 more
#VU87508 - Information Exposure Through Log Files
CVE-2023-27502		 CWE-532 Low
No
No
 - 13.03.2024 SB2024031385
SB2025052118
#VU87507 - Improper input validation
CVE-2023-32633		 CWE-20 Low
No
No
 - 13.03.2024 SB2024031384
SB2025052118
#VU87506 - Incorrect Default Permissions
CVE-2023-28389		 CWE-276 Low
No
No
 - 13.03.2024 SB2024031384
SB2025052118
#VU87496 - Resource exhaustion
CVE-2023-35191		 CWE-400 Low
No
No
 - 13.03.2024 SB2024031383
SB2024082109
SB2025032425
and 4 more
#VU80747 - Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')
CVE-2023-4608		 CWE-89 Medium
No
No
 2.85 TGBT44N 13.09.2023 SB2023091338
#VU80746 - Permissions, Privileges, and Access Controls
CVE-2023-4607		 CWE-264 Medium
No
No
 2.85 TGBT44N 13.09.2023 SB2023091338
SB2024082737
#VU80745 - Permissions, Privileges, and Access Controls
CVE-2023-4606		 CWE-264 Medium
No
No
 2.85 TGBT44N 13.09.2023 SB2023091338