lenovo ideacentre 720-18apr firmware

Name: lenovo ideacentre 720-18apr firmware
Brand: lenovo

productUS

cpe:2.3:o:lenovo:ideacentre_720-18apr_firmware:*:*:*:*:*:*:*:*

A product tracked in the threat graph; the vulnerabilities below are known to affect it.

KEV-listed

public exploit

EPSS ≥ 10%

by severity

1critical2high6medium0low

updated 2026-10-23

vulnerabilities (9)

Related CVEs.

sort

ID	severity	EPSS	exploitable	patched	published	affected
CVE-2019-6188US	critical9.8OT elevated	1.32% (71st)	—	no fix	2019-11-12	—
CVE-2019-6170US	medium6.4	0.35% (27th)	—	no fix	2019-11-12	—
CVE-2019-6172US	medium6.4	0.33% (25th)	—	no fix	2019-11-12	—
CVE-2019-6190US	medium5.5	0.28% (20th)	—	m25kt40a	2020-02-14	< m25kt40a
CVE-2022-40137US	medium6.7	0.23% (13th)	—	no fix	2023-01-30	= m25kt61a
CVE-2022-40136US	medium4.4	0.20% (9th)	—	m25kt61a	2023-01-30	< m25kt61a
CVE-2022-40135US	medium4.4	0.20% (9th)	—	m25kt61a	2023-01-30	< m25kt61a
CVE-2022-48188US	high7.8	0.19% (8th)	—	m25kt63a	2023-06-05	< m25kt63a
CVE-2022-48181US	high7.8	0.19% (8th)	—	m25kt63a	2023-06-05	< m25kt63a

The flaw types (CWEs) most of these CVEs share.

CWE-125Out-of-bounds Read2 CVEs
CWE-787Out-of-bounds Write2 CVEs
CWE-120Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')1 CVEs
CWE-20Improper Input Validation1 CVEs
CWE-306Missing Authentication for Critical Function1 CVEs
CWE-440Expected Behavior Violation1 CVEs
CWE-476NULL Pointer Dereference1 CVEs
CWE-665Improper Initialization1 CVEs

Which sources assert this record, and when.

scry

Products carry known vulnerabilities once they are exposed to the internet. See what is exposed on your perimeter with a free passive scan.