Thinkpad T14S Gen 3 Firmware

2 CVEs product

Monthly

Sort: Newest CVSS Score EPSS Score Oldest

CVE-2023-5078 Nov 08, 22:15 MEDIUM This Month

A vulnerability was reported in some ThinkPad BIOS that could allow a physical or local attacker with elevated privileges to tamper with BIOS firmware. Rated medium severity (CVSS 6.7), this vulnerability is low attack complexity. No vendor patch available.

Information Disclosure Lenovo Thinkpad S2 Yoga Gen 6 Firmware Thinkpad L13 Gen 2 Firmware Thinkpad L13 Yoga Gen 2 Firmware +17

NVD

CVSS 3.1

6.7

EPSS

0.2%

CVE-2023-2290 Jun 26, 20:15 MEDIUM This Month

A potential vulnerability in the LenovoFlashDeviceInterface SMI handler may allow an attacker with local access and elevated privileges to execute arbitrary code. Rated medium severity (CVSS 6.7), this vulnerability is low attack complexity. No vendor patch available.

RCE Buffer Overflow Memory Corruption Lenovo Thinkpad E490S Firmware +84

NVD

CVSS 3.1

6.7

EPSS

0.2%

CVE-2023-5078

EPSS 0% CVSS 6.7

MEDIUM This Month

Information Disclosure Lenovo Thinkpad S2 Yoga Gen 6 Firmware +19

NVD

CVE-2023-2290

EPSS 0% CVSS 6.7

MEDIUM This Month

RCE Buffer Overflow Memory Corruption +86

NVD