Known vulnerabilities in Flash BIOS Update - ThinkCentre M70t Gen 3, M70s Gen 3

Vendor: Lenovo
Software: Flash BIOS Update - ThinkCentre M70t Gen 3, M70s Gen 3
Software CPE: cpe:2.3:h:lenovo:flash_bios_update_-_thinkcentre_m70t_gen_3_m70s_gen_3:*:*:*:*:*:*:*:*
Website: https://www.lenovo.com/
Total vulnerabilities: 11
Public exploits: 0
Known exploited (KEV): 0
Highest CVSSv4 Score: 8.8

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting Flash BIOS Update - ThinkCentre M70t Gen 3, M70s Gen 3 Flash BIOS Update - ThinkCentre M70t Gen 3, M70s Gen 3 is affected by 11 known vulnerabilities: 2 medium, 9 low Critical High Medium Low

Vulnerabilities (11)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU113356 - Permissions, Privileges, and Access Controls
CVE-2024-6364		 CWE-264 Low
No
No
 - 28.07.2025 SB2025072859
SB2025072860
#VU95180 - Integer overflow
CVE-2022-36765		 CWE-190 Low
No
No
 M41KT45A 02.08.2024 SB2024080236
SB2024021453
SB2024021639
and 8 more
#VU89083 - Integer overflow
CVE-2022-36763		 CWE-190 Low
No
No
 M41KT45A 01.05.2024 SB2024011752
SB2024050117
SB2024021453
and 9 more
#VU87737 - Integer overflow
CVE-2022-36764		 CWE-190 Medium
No
No
 M41KT45A 22.03.2024 SB2024011752
SB2024032253
SB2024032254
and 11 more
#VU83976 - Improper input validation
CVE-2023-5058		 CWE-20 Low
No
No
 M41KT4BA 07.12.2023 SB2023120719
SB2023120689
#VU83973 - Improper input validation
CVE-2023-40238		 CWE-20 Low
No
No
 M41KT4BA 07.12.2023 SB2023120718
SB2023120689
#VU83971 - Permissions, Privileges, and Access Controls
CVE-2023-39539		 CWE-264 Low
No
No
 M41KT4BA 07.12.2023 SB2023120714
SB2024082035
SB2023120689
#VU83970 - Permissions, Privileges, and Access Controls
CVE-2023-39538		 CWE-264 Low
No
No
 M41KT4BA 07.12.2023 SB2023120714
SB2023120689
#VU79564 - Improper Access Control
CVE-2022-29871		 CWE-284 Low
No
No
 M41KT53A 15.08.2023 SB2023081549
SB2023082235
SB2023082236
and 1 more
#VU79563 - Improper input validation
CVE-2022-38102		 CWE-20 Low
No
No
 M41KT53A 15.08.2023 SB2023081549
SB2023082235
SB20230808148
#VU79562 - Improper input validation
CVE-2022-36392		 CWE-20 Medium
No
No
 M41KT53A 15.08.2023 SB2023081549
SB2023082235
SB2023082236
and 1 more