← Back

CVE-2022-3728

nvd nist
Published: Oct 9, 2023Modified: Jun 17, 2026

JSON object

Loading...
6.8
Vector
CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Exploitability: 0.9 / Impact: 5.9
Source: NVD

Description

A vulnerability was reported in ThinkPad T14s Gen 3 and X13 Gen3 that could cause the BIOS tamper detection mechanism to not trigger under specific circumstances which could allow unauthorized access.

Affected (2)

Lenovo
2 products
Thinkpad T14s Gen 3 Firmware
Thinkpad X13 Gen 3 Firmware
Configuration A
1 vulnerable · 1 platform
Vulnerable SoftwareAffected Versions
Thinkpad T14s Gen 3 Firmware
Before 1.30
Running on/withPlatform Versions
Lenovo
Thinkpad T14s Gen 3
All versions
Configuration B
1 vulnerable · 1 platform
Vulnerable SoftwareAffected Versions
Thinkpad X13 Gen 3 Firmware
Before 1.30
Running on/withPlatform Versions
Lenovo
Thinkpad X13 Gen 3
All versions

Related CWEs

CWE-1263
Improper Physical Access Control
The product is designed with access restricted to certain information, but it does not sufficiently protect against an unauthorized actor with physical access to these areas.

References (2)

Source: psirt@lenovo.com
Vendor Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
Vendor Advisory

Timeline

No history available yet.