MEDIUM🇵🇱 Wersja polska

CVE-2023-5078

CVSS 6.7v3.1pub. 2023-11-08upd. 2024-11-21

A vulnerability was reported in some ThinkPad BIOS that could allow a physical or local attacker with elevated privileges to tamper with BIOS firmware.

CVSS Vector
CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H

  • Lenovo Thinkpad L13 Gen 2

    HW
    Lenovo
    all versions

  • Lenovo Thinkpad L13 Gen 2 Firmware

    OS
    Lenovo
    all versions

  • Lenovo Thinkpad L13 Gen 3

    HW
    Lenovo
    all versions

  • Lenovo Thinkpad L13 Gen 3 Firmware

    OS
    Lenovo
    < 1.19

  • Lenovo Thinkpad L13 Gen 4

    HW
    Lenovo
    all versions

  • Lenovo Thinkpad L13 Gen 4 Firmware

    OS
    Lenovo
    all versions

  • Lenovo Thinkpad L13 Yoga Gen 2

    HW
    Lenovo
    all versions

  • Lenovo Thinkpad L13 Yoga Gen 2 Firmware

    OS
    Lenovo
    all versions

  • Lenovo Thinkpad L13 Yoga Gen 3

    HW
    Lenovo
    all versions

  • Lenovo Thinkpad L13 Yoga Gen 3 Firmware

    OS
    Lenovo
    < 1.19

  • Lenovo Thinkpad L13 Yoga Gen 4

    HW
    Lenovo
    all versions

  • Lenovo Thinkpad L13 Yoga Gen 4 Firmware

    OS
    Lenovo
    all versions

  • Lenovo Thinkpad L14 Gen 3

    HW
    Lenovo
    all versions

  • Lenovo Thinkpad L14 Gen 3 Firmware

    OS
    Lenovo
    < 1.23

  • Lenovo Thinkpad L14 Gen 4

    HW
    Lenovo
    all versions

  • Lenovo Thinkpad L14 Gen 4 Firmware

    OS
    Lenovo
    < 1.1

  • Lenovo Thinkpad L15 Gen 3

    HW
    Lenovo
    all versions

  • Lenovo Thinkpad L15 Gen 3 Firmware

    OS
    Lenovo
    < 1.23

  • Lenovo Thinkpad L15 Gen 4

    HW
    Lenovo
    all versions

  • Lenovo Thinkpad L15 Gen 4 Firmware

    OS
    Lenovo
    < 1.1

  • Lenovo Thinkpad P14s Gen 3

    HW
    Lenovo
    all versions

  • Lenovo Thinkpad P14s Gen 3 Firmware

    OS
    Lenovo
    all versions

  • Lenovo Thinkpad P16s Gen 1

    HW
    Lenovo
    all versions

  • Lenovo Thinkpad P16s Gen 1 Firmware

    OS
    Lenovo
    all versions

  • Lenovo Thinkpad S2 Gen 8

    HW
    Lenovo
    all versions

  • Lenovo Thinkpad S2 Gen 8 Firmware

    OS
    Lenovo
    all versions

  • Lenovo Thinkpad S2 Yoga Gen 6

    HW
    Lenovo
    all versions

  • Lenovo Thinkpad S2 Yoga Gen 6 Firmware

    OS
    Lenovo
    all versions

  • Lenovo Thinkpad S2 Yoga Gen 7

    HW
    Lenovo
    all versions

  • Lenovo Thinkpad S2 Yoga Gen 7 Firmware

    OS
    Lenovo
    < 1.19
🔵
CHECK WITH VENDOR
No clear patch data available. Check vendor references.
References

Related vulnerabilities

CVE-2023-3112HIGH7.8same product

A vulnerability was reported in Elliptic Labs Virtual Lock Sensor for ThinkPad T14 Gen 3 that could allow an a...

CVE-2022-4574MEDIUM6.7same product

An SMI handler input validation vulnerability in the BIOS of some ThinkPad models could allow an attacker wit...

CVE-2022-48189MEDIUM6.7same product

An SMM driver input validation vulnerability in the BIOS of some ThinkPad models could allow an attacker with ...

CVE-2022-48183MEDIUM6.1same product

A vulnerability was reported in ThinkPad T14s Gen 3 and X13 Gen3 that could cause the BIOS tamper detection m...

CVE-2022-3728MEDIUM6.1same product

A vulnerability was reported in ThinkPad T14s Gen 3 and X13 Gen3 that could cause the BIOS tamper detection m...