Known vulnerabilities in Flash BIOS update - ThinkCentre M70t, M70s, M80t, M80

Vendor: Lenovo
Software: Flash BIOS update - ThinkCentre M70t, M70s, M80t, M80
Software CPE: cpe:2.3:h:lenovo:flash_bios_update_-_thinkcentre_m70t_m70s_m80t_m80:*:*:*:*:*:*:*:*
Website: https://www.lenovo.com/
Total vulnerabilities: 25
Public exploits: 0
Known exploited (KEV): 0
Highest CVSSv4 Score: 8.8

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting Flash BIOS update - ThinkCentre M70t, M70s, M80t, M80 Flash BIOS update - ThinkCentre M70t, M70s, M80t, M80 is affected by 25 known vulnerabilities: 3 medium, 22 low Critical High Medium Low

Vulnerabilities (25)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU113356 - Permissions, Privileges, and Access Controls
CVE-2024-6364		 CWE-264 Low
No
No
 - 28.07.2025 SB2025072859
SB2025072860
#VU111030 - Out-of-bounds read
CVE-2025-2884		 CWE-125 Low
No
No
 M2TKT5DA 11.06.2025 SB2025061103
SB2025061303
SB2025072845
and 4 more
#VU104075 - Improper Access Control
CVE-2024-30211		 CWE-284 Low
No
No
 M2TKT5DA 19.02.2025 SB2025022014
SB2025051632
SB2025052076
#VU104071 - Improper Initialization
CVE-2024-26021		 CWE-665 Low
No
No
 M2TKT5DA 19.02.2025 SB2025022014
SB2025051632
SB2025052076
#VU104063 - Improper input validation
CVE-2024-38307		 CWE-20 Medium
No
No
 M2TKT5DA 19.02.2025 SB2025022014
SB2025051632
SB2025052076
#VU96077 - Memory corruption
CVE-2023-38655		 CWE-119 Low
No
No
 M2TKT5BA 16.08.2024 SB2024081629
SB20250520128
#VU96076 - Improper input validation
CVE-2023-34424		 CWE-20 Low
No
No
 M2TKT5BA 16.08.2024 SB2024081629
SB20250520128
#VU96075 - Improper Initialization
CVE-2023-35061		 CWE-665 Low
No
No
 M2TKT5BA 16.08.2024 SB2024081629
SB20250520128
#VU96074 - Integer overflow
CVE-2024-21844		 CWE-190 Low
No
No
 M2TKT5BA 16.08.2024 SB2024081629
SB20250520128
#VU96073 - Improper Initialization
CVE-2023-48361		 CWE-665 Low
No
No
 M2TKT5BA 16.08.2024 SB2024081629
SB20250520128
#VU96072 - Unchecked Return Value
CVE-2023-40067		 CWE-252 Low
No
No
 M2TKT5BA 16.08.2024 SB2024081629
SB20250520128
#VU95180 - Integer overflow
CVE-2022-36765		 CWE-190 Low
No
No
 M2TKT56A 02.08.2024 SB2024080236
SB2024021453
SB2024021639
and 8 more
#VU89083 - Integer overflow
CVE-2022-36763		 CWE-190 Low
No
No
 M2TKT56A 01.05.2024 SB2024011752
SB2024050117
SB2024021453
and 9 more
#VU87737 - Integer overflow
CVE-2022-36764		 CWE-190 Medium
No
No
 M2TKT56A 22.03.2024 SB2024011752
SB2024032253
SB2024032254
and 11 more
#VU87508 - Information Exposure Through Log Files
CVE-2023-27502		 CWE-532 Low
No
No
 M2TKT59A 13.03.2024 SB2024031385
SB2025052118
#VU87507 - Improper input validation
CVE-2023-32633		 CWE-20 Low
No
No
 M2TKT59A 13.03.2024 SB2024031384
SB2025052118
#VU87506 - Incorrect Default Permissions
CVE-2023-28389		 CWE-276 Low
No
No
 M2TKT59A 13.03.2024 SB2024031384
SB2025052118
#VU87496 - Resource exhaustion
CVE-2023-35191		 CWE-400 Low
No
No
 M2TKT59A 13.03.2024 SB2024031383
SB2024082109
SB2025032425
and 4 more
#VU83976 - Improper input validation
CVE-2023-5058		 CWE-20 Low
No
No
 M2TKT58A 07.12.2023 SB2023120719
SB2023120689
#VU83970 - Permissions, Privileges, and Access Controls
CVE-2023-39538		 CWE-264 Low
No
No
 M2TKT58A 07.12.2023 SB2023120714
SB2023120689


Showing elements 1 - 20 out of 25