Known vulnerabilities in Flash BIOS Update - ThinkStation P5

Known vulnerabilities in Flash BIOS Update - ThinkStation P5

Vendor: Lenovo

Software: Flash BIOS Update - ThinkStation P5

Software CPE: cpe:2.3:h:lenovo:flash_bios_update_-_thinkstation_p5:*:*:*:*:*:*:*:*

Website: https://www.lenovo.com/

Total vulnerabilities: 17

Public exploits: 0

Known exploited (KEV): 0

Highest CVSSv4 Score: 8.7

Breakdown by Severity Chart

Vulnerabilities (17)

Vulnerability	CWE-ID	CSH Severity	Public Exploit	KEV	First fixed release	Published	Bulletins
#VU113731 - Uncaught Exception CVE-2025-3770	CWE-248	Low	No	No	-	07.08.2025	SB2025080722 SB20250908112 SB2025092259 and 9 more
#VU113356 - Permissions, Privileges, and Access Controls CVE-2024-6364	CWE-264	Low	No	No	-	28.07.2025	SB2025072859 SB2025072860
#VU111030 - Out-of-bounds read CVE-2025-2884	CWE-125	Low	No	No	16.11.20.1870	11.06.2025	SB2025061103 SB2025061303 SB2025072845 and 4 more
#VU104075 - Improper Access Control CVE-2024-30211	CWE-284	Low	No	No	16.11.20.1870	19.02.2025	SB2025022014 SB2025051632 SB2025052076
#VU104071 - Improper Initialization CVE-2024-26021	CWE-665	Low	No	No	16.11.20.1870	19.02.2025	SB2025022014 SB2025051632 SB2025052076
#VU104063 - Improper input validation CVE-2024-38307	CWE-20	Medium	No	No	16.11.20.1870	19.02.2025	SB2025022014 SB2025051632 SB2025052076
#VU95180 - Integer overflow CVE-2022-36765	CWE-190	Low	No	No	S0CKT13A	02.08.2024	SB2024080236 SB2024021453 SB2024021639 and 8 more
#VU89083 - Integer overflow CVE-2022-36763	CWE-190	Low	No	No	S0CKT13A	01.05.2024	SB2024011752 SB2024050117 SB2024021453 and 9 more
#VU87737 - Integer overflow CVE-2022-36764	CWE-190	Medium	No	No	S0CKT13A	22.03.2024	SB2024011752 SB2024032253 SB2024032254 and 11 more
#VU87508 - Information Exposure Through Log Files CVE-2023-27502	CWE-532	Low	No	No	2336.5.2.0	13.03.2024	SB2024031385 SB2025052118
#VU87507 - Improper input validation CVE-2023-32633	CWE-20	Low	No	No	2336.5.2.0	13.03.2024	SB2024031384 SB2025052118
#VU87506 - Incorrect Default Permissions CVE-2023-28389	CWE-276	Low	No	No	2336.5.2.0	13.03.2024	SB2024031384 SB2025052118
#VU87496 - Resource exhaustion CVE-2023-35191	CWE-400	Low	No	No	2336.5.2.0	13.03.2024	SB2024031383 SB2024082109 SB2025032425 and 4 more
#VU83976 - Improper input validation CVE-2023-5058	CWE-20	Low	No	No	S0CKT12A	07.12.2023	SB2023120719 SB2023120689
#VU83973 - Improper input validation CVE-2023-40238	CWE-20	Low	No	No	S0CKT12A	07.12.2023	SB2023120718 SB2023120689
#VU83971 - Permissions, Privileges, and Access Controls CVE-2023-39539	CWE-264	Low	No	No	S0CKT12A	07.12.2023	SB2023120714 SB2024082035 SB2023120689
#VU83970 - Permissions, Privileges, and Access Controls CVE-2023-39538	CWE-264	Low	No	No	S0CKT12A	07.12.2023	SB2023120714 SB2023120689