Known vulnerabilities in ThinkSystem SR650

Vendor: Lenovo
Software: ThinkSystem SR650
Software CPE: cpe:2.3:h:lenovo:thinksystem_sr650:*:*:*:*:*:*:*:*
Website: https://www.lenovo.com/
Total vulnerabilities: 52
Public exploits: 0
Known exploited (KEV): 0

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting ThinkSystem SR650 ThinkSystem SR650 is affected by 52 known vulnerabilities: 7 medium, 45 low Critical High Medium Low

Vulnerabilities (52)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU120620 - Out-of-bounds write
CVE-2025-23299		 CWE-787 Low
No
No
 - 29.12.2025 SB2025122912
SB2025122913
SB2026072323
and 1 more
#VU116985 - Access of Uninitialized Pointer
CVE-2025-23352		 CWE-824 Low
No
No
 - 14.10.2025 SB2025101449
SB2025122911
#VU116984 - NULL Pointer Dereference
CVE-2025-23332		 CWE-476 Low
No
No
 - 14.10.2025 SB2025101448
SB2025122911
#VU116983 - NULL Pointer Dereference
CVE-2025-23330		 CWE-476 Low
No
No
 - 14.10.2025 SB2025101448
SB2025122911
#VU116982 - NULL Pointer Dereference
CVE-2025-23300		 CWE-476 Low
No
No
 - 14.10.2025 SB2025101448
SB2025122911
#VU116981 - Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition')
CVE-2025-23282		 CWE-362 Low
No
No
 - 14.10.2025 SB2025101448
SB2025122911
#VU116980 - Use After Free
CVE-2025-23280		 CWE-416 Low
No
No
 - 14.10.2025 SB2025101448
SB2025122911
#VU116979 - Out-of-bounds read
CVE-2025-23345		 CWE-125 Low
No
No
 - 14.10.2025 SB2025101447
SB2025101448
SB2025122911
#VU116978 - Incorrect Default Permissions
CVE-2025-23347		 CWE-276 Low
No
No
 - 14.10.2025 SB2025101447
SB2025122911
#VU116977 - Uncontrolled Search Path Element
CVE-2025-23309		 CWE-427 Low
No
No
 - 14.10.2025 SB2025101447
SB2025122911
#VU107924 - Resource exhaustion
CVE-2025-23246		 CWE-400 Low
No
No
 - 24.04.2025 SB2025042468
SB2025042469
SB2025061301
#VU107923 - Incorrect Permission Assignment for Critical Resource
CVE-2025-23245		 CWE-732 Low
No
No
 - 24.04.2025 SB2025042468
SB2025042469
SB2025061301
#VU107922 - Incorrect Authorization
CVE-2025-23244		 CWE-863 Low
No
No
 - 24.04.2025 SB2025042468
SB2025051233
SB2025061301
#VU95180 - Integer overflow
CVE-2022-36765		 CWE-190 Low
No
No
 - 02.08.2024 SB2024080236
SB2024021453
SB2024021639
and 8 more
#VU89083 - Integer overflow
CVE-2022-36763		 CWE-190 Low
No
No
 - 01.05.2024 SB2024011752
SB2024050117
SB2024021453
and 9 more
#VU87737 - Integer overflow
CVE-2022-36764		 CWE-190 Medium
No
No
 - 22.03.2024 SB2024011752
SB2024032253
SB2024032254
and 11 more
#VU86930 - NULL Pointer Dereference
CVE-2024-0079		 CWE-476 Low
No
No
 - 29.02.2024 SB2024022938
SB2025052119
#VU86929 - Improper Authorization
CVE-2024-0077		 CWE-285 Medium
No
No
 - 29.02.2024 SB2024022938
SB2025052119
#VU86927 - Integer overflow
CVE-2022-42265		 CWE-190 Low
No
No
 - 29.02.2024 SB2024022934
SB2024022938
SB2024030557
and 2 more
#VU86925 - NULL Pointer Dereference
CVE-2024-0078		 CWE-476 Low
No
No
 - 29.02.2024 SB2024022934
SB2024022938
SB2025052119


Showing elements 1 - 20 out of 52