Thinkpad L14 Gen 3 Firmware

2 CVEs product

Monthly

Sort: Newest CVSS Score EPSS Score Oldest

CVE-2023-5078 Nov 08, 22:15 MEDIUM This Month

A vulnerability was reported in some ThinkPad BIOS that could allow a physical or local attacker with elevated privileges to tamper with BIOS firmware. Rated medium severity (CVSS 6.7), this vulnerability is low attack complexity. No vendor patch available.

Information Disclosure Lenovo Thinkpad S2 Yoga Gen 6 Firmware Thinkpad L13 Gen 2 Firmware Thinkpad L13 Yoga Gen 2 Firmware +17

NVD

CVSS 3.1

6.7

EPSS

0.2%

CVE-2023-4029 Aug 17, 17:15 MEDIUM This Month

A buffer overflow has been identified in the BoardUpdateAcpiDxe driver in some Lenovo ThinkPad products which may allow an attacker with local access and elevated privileges to execute arbitrary code. Rated medium severity (CVSS 6.7), this vulnerability is low attack complexity. No vendor patch available.

RCE Buffer Overflow Lenovo Thinkpad X13 Gen 2 Firmware Thinkpad S2 Gen 6 Firmware +24

NVD

CVSS 3.1

6.7

EPSS

0.2%

CVE-2023-5078

EPSS 0% CVSS 6.7

MEDIUM This Month

Information Disclosure Lenovo Thinkpad S2 Yoga Gen 6 Firmware +19

NVD

CVE-2023-4029

EPSS 0% CVSS 6.7

MEDIUM This Month

RCE Buffer Overflow Lenovo +26

NVD