Lenovo THINKSYSTEM SR670 V2 -
Approved changes feed: RSS · Atom
cpe:2.3:h:lenovo:thinksystem_sr670_v2:-:*:*:*:*:*:*:*
part: h version: - update: *
| Vendor | Lenovo (c98ed681-bc65-5c44-8bbb-e0a228f96d0e) |
|---|---|
| Product | Thinksystem Sr670 V2 (feed928a-6da0-5170-a8c0-438f6d79d13a) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from NVD CPE 2.0 feed |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2024-23591 |
not_vulnerable | 2026-06-08 06:29:39.977198 |
Details available
LOW (2)
ThinkSystem SR670V2 servers manufactured from approximately June 2021 to July 2023 were left in Manufacturing Mode which could allow
an attacker with privileged logical access to the host or physical access to server internals to modify or disable Intel Boot Guard firmware integrity, SPS security, and other SPS configuration setting. The server’s NIST SP
800-193-compliant Platform Firmware Resiliency (PFR) security subsystem
significantly mitigates this issue.
Published: 2024-02-16T16:17:58.614Z
Updated: 2025-07-23T14:23:24.383Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2023-4608 |
not_vulnerable | 2026-06-08 06:16:13.789898 |
Details available
MEDIUM (4.1)
An authenticated XCC user with elevated privileges can perform blind SQL injection in limited cases through a crafted API command.
This affects ThinkSystem v2 and v3 servers with XCC; ThinkSystem v1 servers are not affected.
Published: 2023-10-24T20:25:49.416Z
Updated: 2024-09-11T20:38:29.704Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2023-4607 |
not_vulnerable | 2026-06-08 06:16:13.654973 |
Details available
HIGH (7.5)
An authenticated XCC user can change permissions for any user through a crafted API command.
Published: 2023-10-24T20:25:30.100Z
Updated: 2024-12-03T14:39:50.517Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2023-4606 |
not_vulnerable | 2026-06-08 06:16:13.627019 |
Details available
HIGH (8.1)
An authenticated XCC user with Read-Only permission can change a different user’s password through a crafted API command.
This affects ThinkSystem v2 and v3 servers with XCC; ThinkSystem v1 servers are not affected.
Published: 2023-10-24T20:25:09.243Z
Updated: 2024-09-11T18:24:50.644Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2023-29058 |
not_vulnerable | 2026-06-08 06:02:38.431340 |
Details available
MEDIUM (6.4)
A valid, authenticated XCC user with read-only permissions can modify custom user roles on other user accounts and the user trespass message through the XCC CLI. There is no exposure if SSH is disabled or if there are no users assigned optional read-only permissions.
Published: 2023-04-28T20:47:46.172Z
Updated: 2025-01-30T18:49:28.930Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2023-29057 |
not_vulnerable | 2026-06-08 06:02:38.406648 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2023-29056 |
not_vulnerable | 2026-06-08 06:02:38.366038 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2023-25495 |
not_vulnerable | 2026-06-08 05:56:09.061669 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2023-25492 |
not_vulnerable | 2026-06-08 05:56:09.030643 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2023-0683 |
not_vulnerable | 2026-06-08 05:52:32.421361 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2022-40134 |
not_vulnerable | 2026-06-08 05:48:23.426143 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2022-34888 |
not_vulnerable | 2026-06-08 05:46:03.955199 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2022-34884 |
not_vulnerable | 2026-06-08 05:46:03.908509 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.