Lenovo Thinkserver Rd650 Firmware — known CVE vulnerabilities

Every CVE whose affected-product data names Lenovo Thinkserver Rd650 Firmware, ordered by CVSS severity, with EPSS exploit prediction and CISA KEV status.

CVEs (4)

• CVE-2017-17833 — CVSS 9.8 (critical): OpenSLP releases in the 1.0.2 and 1.1.0 code streams have a heap-related memory corruption issue which may manifest itself as a…
• CVE-2022-40137 — CVSS 6.7 (medium): A buffer overflow in the WMI SMI Handler in some Lenovo models may allow an attacker with local access and elevated privileges to execute…
• CVE-2015-3322 — CVSS 5.0 (medium): Lenovo ThinkServer RD350, RD450, RD550, RD650, and TD350 servers before 1.26.0 use weak encryption to store (1) user and (2) administrator…
• CVE-2022-40134 — CVSS 4.4 (medium): An information leak vulnerability in the SMI Set BIOS Password SMI Handler in some Lenovo models may allow an attacker with local access…