Thinkpad T14 Gen 3 Firmware

2 CVEs product

Monthly

Sort: Newest CVSS Score EPSS Score Oldest

CVE-2023-5078 MEDIUM This Month

A vulnerability was reported in some ThinkPad BIOS that could allow a physical or local attacker with elevated privileges to tamper with BIOS firmware. Rated medium severity (CVSS 6.7), this vulnerability is low attack complexity. No vendor patch available.

Information Disclosure Thinkpad X13 Gen 3 Firmware Thinkpad S2 Yoga Gen 7 Firmware Thinkpad S2 Yoga Gen 6 Firmware Thinkpad S2 Gen 8 Firmware +16

NVD

CVSS 3.1

6.7

EPSS

0.2%

CVE-2023-2290 MEDIUM This Month

A potential vulnerability in the LenovoFlashDeviceInterface SMI handler may allow an attacker with local access and elevated privileges to execute arbitrary code. Rated medium severity (CVSS 6.7), this vulnerability is low attack complexity. No vendor patch available.

Memory Corruption Buffer Overflow RCE Thinkpad E14 Firmware Thinkpad E14 Gen 2 Firmware +83

NVD

CVSS 3.1

6.7

EPSS

0.2%

CVE-2023-5078

EPSS 0% CVSS 6.7

MEDIUM This Month

Information Disclosure Thinkpad X13 Gen 3 Firmware Thinkpad S2 Yoga Gen 7 Firmware +18

NVD

CVE-2023-2290

EPSS 0% CVSS 6.7

MEDIUM This Month

Memory Corruption Buffer Overflow RCE +85

NVD