Known vulnerabilities in ThinkSystem SR645

Vendor: Lenovo
Software: ThinkSystem SR645
Software CPE: cpe:2.3:h:lenovo:thinksystem_sr645:*:*:*:*:*:*:*:*
Website: https://www.lenovo.com/
Total vulnerabilities: 63
Public exploits: 0
Known exploited (KEV): 0

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting ThinkSystem SR645 ThinkSystem SR645 is affected by 63 known vulnerabilities: 9 medium, 54 low Critical High Medium Low

Vulnerabilities (63)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU120620 - Out-of-bounds write
CVE-2025-23299		 CWE-787 Low
No
No
 - 29.12.2025 SB2025122912
SB2025122913
SB2026072323
and 1 more
#VU116985 - Access of Uninitialized Pointer
CVE-2025-23352		 CWE-824 Low
No
No
 - 14.10.2025 SB2025101449
SB2025122911
#VU116984 - NULL Pointer Dereference
CVE-2025-23332		 CWE-476 Low
No
No
 - 14.10.2025 SB2025101448
SB2025122911
#VU116983 - NULL Pointer Dereference
CVE-2025-23330		 CWE-476 Low
No
No
 - 14.10.2025 SB2025101448
SB2025122911
#VU116982 - NULL Pointer Dereference
CVE-2025-23300		 CWE-476 Low
No
No
 - 14.10.2025 SB2025101448
SB2025122911
#VU116981 - Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition')
CVE-2025-23282		 CWE-362 Low
No
No
 - 14.10.2025 SB2025101448
SB2025122911
#VU116980 - Use After Free
CVE-2025-23280		 CWE-416 Low
No
No
 - 14.10.2025 SB2025101448
SB2025122911
#VU116979 - Out-of-bounds read
CVE-2025-23345		 CWE-125 Low
No
No
 - 14.10.2025 SB2025101447
SB2025101448
SB2025122911
#VU116978 - Incorrect Default Permissions
CVE-2025-23347		 CWE-276 Low
No
No
 - 14.10.2025 SB2025101447
SB2025122911
#VU116977 - Uncontrolled Search Path Element
CVE-2025-23309		 CWE-427 Low
No
No
 - 14.10.2025 SB2025101447
SB2025122911
#VU112557 - Information Exposure through Microarchitectural State after Transient Execution
CVE-2024-36349		 CWE-1342 Low
No
No
 - 08.07.2025 SB2025070901
SB2025070903
SB2025072844
and 9 more
#VU112556 - Information Exposure through Microarchitectural State after Transient Execution
CVE-2024-36348		 CWE-1342 Low
No
No
 - 08.07.2025 SB2025070901
SB2025070903
SB2025072844
and 9 more
#VU112552 - Information Exposure through Microarchitectural State after Transient Execution
CVE-2024-36357		 CWE-1342 Low
No
No
 - 08.07.2025 SB2025070882
SB2025070903
SB2025070904
and 43 more
#VU112549 - Information Exposure through Microarchitectural State after Transient Execution
CVE-2024-36350		 CWE-1342 Low
No
No
 - 08.07.2025 SB2025070882
SB2025070903
SB2025070904
and 40 more
#VU109411 - Improper Access Control
CVE-2025-20100		 CWE-284 Low
No
No
 - 19.05.2025 SB2025051921
SB2025072844
#VU109410 - Insufficient Control Flow Management
CVE-2025-20004		 CWE-691 Low
No
No
 - 19.05.2025 SB2025051921
SB2025072844
#VU109409 - Improper restriction of software interfaces to hardware features
CVE-2024-48869		 CWE-1256 Low
No
No
 - 19.05.2025 SB2025051921
SB2025072844
#VU107924 - Resource exhaustion
CVE-2025-23246		 CWE-400 Low
No
No
 - 24.04.2025 SB2025042468
SB2025042469
SB2025061301
#VU107923 - Incorrect Permission Assignment for Critical Resource
CVE-2025-23245		 CWE-732 Low
No
No
 - 24.04.2025 SB2025042468
SB2025042469
SB2025061301
#VU107922 - Incorrect Authorization
CVE-2025-23244		 CWE-863 Low
No
No
 - 24.04.2025 SB2025042468
SB2025051233
SB2025061301


Showing elements 1 - 20 out of 63