← Back

CVE-2023-4030

nvd nist
Published: Aug 17, 2023Modified: Jun 17, 2026

JSON object

Loading...
7.8
Vector
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Exploitability: 1.8 / Impact: 5.9
Source: NVD

Description

A vulnerability was reported in BIOS for ThinkPad P14s Gen 2, P15s Gen 2, T14 Gen 2, and T15 Gen 2 that could cause the system to recover to insecure settings if the BIOS becomes corrupt.

Affected (4)

Lenovo
4 products
Thinkpad T15 Gen 2 Firmware
Thinkpad P14s Gen 2 Firmware
Thinkpad P15s Gen 2 Firmware
Thinkpad T14 Gen 2 Firmware
Configuration A
1 vulnerable · 1 platform
Vulnerable SoftwareAffected Versions
Thinkpad T15 Gen 2 Firmware
All versions
Running on/withPlatform Versions
Lenovo
Thinkpad T15 Gen 2
All versions
Configuration B
1 vulnerable · 1 platform
Vulnerable SoftwareAffected Versions
Thinkpad P14s Gen 2 Firmware
All versions
Running on/withPlatform Versions
Lenovo
Thinkpad P14s Gen 2
All versions
Configuration C
1 vulnerable · 1 platform
Vulnerable SoftwareAffected Versions
Thinkpad P15s Gen 2 Firmware
All versions
Running on/withPlatform Versions
Lenovo
Thinkpad P15s Gen 2
All versions
Configuration D
1 vulnerable · 1 platform
Vulnerable SoftwareAffected Versions
Thinkpad T14 Gen 2 Firmware
All versions
Running on/withPlatform Versions
Lenovo
Thinkpad T14 Gen 2
All versions

Related CWEs

CWE-636
Not Failing Securely ('Failing Open')
When the product encounters an error condition or failure, its design requires it to fall back to a state that is less secure than other options that are available, such as selecting the weakest encryption algorithm or using the most permissive access control restrictions.

References (2)

Source: psirt@lenovo.com
Vendor Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
Vendor Advisory

Timeline

No history available yet.