Known vulnerabilities in Intel Management Engine Firmware Update Tool - ThinkStation P720, P920

Vendor: Lenovo
Software: Intel Management Engine Firmware Update Tool - ThinkStation P720, P920
Software CPE: cpe:2.3:h:lenovo:intel_management_engine_firmware_update_tool_-_thinkstation_p720_p920:*:*:*:*:*:*:*:*
Website: https://www.lenovo.com/
Total vulnerabilities: 10
Public exploits: 0
Known exploited (KEV): 0
Highest CVSSv4 Score: 7.2

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting Intel Management Engine Firmware Update Tool - ThinkStation P720, P920 Intel Management Engine Firmware Update Tool - ThinkStation P720, P920 is affected by 10 known vulnerabilities: 1 medium, 9 low Critical High Medium Low

Vulnerabilities (10)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU114178 - Information Exposure Through Log Files
CVE-2025-24520		 CWE-532 Low
No
No
 - 18.08.2025 SB2025081859
SB2025083026
#VU104075 - Improper Access Control
CVE-2024-30211		 CWE-284 Low
No
No
 - 19.02.2025 SB2025022014
SB2025051632
SB2025052076
#VU104071 - Improper Initialization
CVE-2024-26021		 CWE-665 Low
No
No
 - 19.02.2025 SB2025022014
SB2025051632
SB2025052076
#VU104063 - Improper input validation
CVE-2024-38307		 CWE-20 Medium
No
No
 - 19.02.2025 SB2025022014
SB2025051632
SB2025052076
#VU96077 - Memory corruption
CVE-2023-38655		 CWE-119 Low
No
No
 11.22.96.2588 16.08.2024 SB2024081629
SB20250520128
#VU96076 - Improper input validation
CVE-2023-34424		 CWE-20 Low
No
No
 11.22.96.2588 16.08.2024 SB2024081629
SB20250520128
#VU96075 - Improper Initialization
CVE-2023-35061		 CWE-665 Low
No
No
 11.22.96.2588 16.08.2024 SB2024081629
SB20250520128
#VU96074 - Integer overflow
CVE-2024-21844		 CWE-190 Low
No
No
 11.22.96.2588 16.08.2024 SB2024081629
SB20250520128
#VU96073 - Improper Initialization
CVE-2023-48361		 CWE-665 Low
No
No
 11.22.96.2588 16.08.2024 SB2024081629
SB20250520128
#VU96072 - Unchecked Return Value
CVE-2023-40067		 CWE-252 Low
No
No
 11.22.96.2588 16.08.2024 SB2024081629
SB20250520128