Known vulnerabilities in Intel Management Engine Firmware Update Tool - ThinkStation P520, P520c

Vendor: Lenovo

Software CPE: cpe:2.3:h:lenovo:intel_management_engine_firmware_update_tool_-_thinkstation_p520_p520c:*:*:*:*:*:*:*:*

Website: https://www.lenovo.com/

Total vulnerabilities: 11

Public exploits: 0

Known exploited (KEV): 0

Highest CVSSv4 Score: 7.2

Vulnerabilities (11)

Vulnerability	CWE-ID	CSH Severity	Public Exploit	KEV	First fixed release	Published	Bulletins
#VU114178 - Information Exposure Through Log Files CVE-2025-24520	CWE-532	Low	No	No	-	18.08.2025	SB2025081859 SB2025083026
#VU111030 - Out-of-bounds read CVE-2025-2884	CWE-125	Low	No	No	11.12.96.2535	11.06.2025	SB2025061103 SB2025061303 SB2025072845 and 4 more
#VU104075 - Improper Access Control CVE-2024-30211	CWE-284	Low	No	No	-	19.02.2025	SB2025022014 SB2025051632 SB2025052076
#VU104071 - Improper Initialization CVE-2024-26021	CWE-665	Low	No	No	-	19.02.2025	SB2025022014 SB2025051632 SB2025052076
#VU104063 - Improper input validation CVE-2024-38307	CWE-20	Medium	No	No	-	19.02.2025	SB2025022014 SB2025051632 SB2025052076
#VU96077 - Memory corruption CVE-2023-38655	CWE-119	Low	No	No	S03KT67A	16.08.2024	SB2024081629 SB20250520128
#VU96076 - Improper input validation CVE-2023-34424	CWE-20	Low	No	No	S03KT67A	16.08.2024	SB2024081629 SB20250520128
#VU96075 - Improper Initialization CVE-2023-35061	CWE-665	Low	No	No	S03KT67A	16.08.2024	SB2024081629 SB20250520128
#VU96074 - Integer overflow CVE-2024-21844	CWE-190	Low	No	No	S03KT67A	16.08.2024	SB2024081629 SB20250520128
#VU96073 - Improper Initialization CVE-2023-48361	CWE-665	Low	No	No	S03KT67A	16.08.2024	SB2024081629 SB20250520128
#VU96072 - Unchecked Return Value CVE-2023-40067	CWE-252	Low	No	No	S03KT67A	16.08.2024	SB2024081629 SB20250520128