CVEvulnerability
CVE-2023-4030
7.8 HIGH
Official page ↗
- Status
- Modified
- Published
- 2023-08-17
- Last modified
- 2026-06-17
- Assigner
- [email protected]
- CVSS 3.1 ([email protected])
- 8.4 HIGH — CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
- CVSS 3.1 ([email protected])
- 7.8 HIGH — CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
- Weaknesses
- CWE-636
Description
A vulnerability was reported in BIOS for ThinkPad P14s Gen 2, P15s Gen 2, T14 Gen 2, and T15 Gen 2 that could cause the system to recover to insecure settings if the BIOS becomes corrupt.
Affected configurations
• lenovo thinkpad t15 gen 2 firmware
• lenovo thinkpad p14s gen 2 firmware
• lenovo thinkpad p15s gen 2 firmware
• lenovo thinkpad t14 gen 2 firmware
Related
Weakness · CWE (1)
- CWE-636 Not Failing Securely weakness
References
- https://support.lenovo.com/us/en/product_security/LEN-134879 Vendor Advisory
- https://support.lenovo.com/us/en/product_security/LEN-134879 Vendor Advisory