CVE-2023-5078

Published: Nov 8, 2023Modified: Jun 17, 2026

6.7

Vector

CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H

Exploitability: 0.8 / Impact: 5.9

Source: NVD

Description

A vulnerability was reported in some ThinkPad BIOS that could allow a physical or local attacker with elevated privileges to tamper with BIOS firmware.

Affected (20)

Lenovo

20 products

Thinkpad X13 Gen 3 Firmware

Thinkpad S2 Yoga Gen 7 Firmware

Thinkpad S2 Yoga Gen 6 Firmware

Thinkpad S2 Gen 8 Firmware

Thinkpad P14s Gen 3 Firmware

Thinkpad P16s Gen 1 Firmware

Thinkpad T14 Gen 3 Firmware

Thinkpad T14s Gen 3 Firmware

Thinkpad T16 Gen 1 Firmware

Thinkpad L14 Gen 3 Firmware

Thinkpad L14 Gen 4 Firmware

Thinkpad L15 Gen 3 Firmware

Thinkpad L15 Gen 4 Firmware

Thinkpad L13 Yoga Gen 4 Firmware

Thinkpad L13 Yoga Gen 3 Firmware

Thinkpad L13 Yoga Gen 2 Firmware

Thinkpad L13 Gen 4 Firmware

Thinkpad L13 Gen 3 Firmware

Thinkpad L13 Gen 2 Firmware

Thinkpad S2 Yoga Gen 8 Firmware

Configuration A

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Lenovo Thinkpad X13 Gen 3 Firmware	All versions

Running on/with	Platform Versions
Lenovo Thinkpad X13 Gen 3	All versions

Configuration B

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Lenovo Thinkpad S2 Yoga Gen 7 Firmware	Before 1.19

Running on/with	Platform Versions
Lenovo Thinkpad S2 Yoga Gen 7	All versions

Configuration C

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Lenovo Thinkpad S2 Yoga Gen 6 Firmware	All versions

Running on/with	Platform Versions
Lenovo Thinkpad S2 Yoga Gen 6	All versions

Configuration D

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Lenovo Thinkpad S2 Gen 8 Firmware	All versions

Running on/with	Platform Versions
Lenovo Thinkpad S2 Gen 8	All versions

Configuration E

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Lenovo Thinkpad P14s Gen 3 Firmware	All versions

Running on/with	Platform Versions
Lenovo Thinkpad P14s Gen 3	All versions

Configuration F

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Lenovo Thinkpad P16s Gen 1 Firmware	All versions

Running on/with	Platform Versions
Lenovo Thinkpad P16s Gen 1	All versions

Configuration G

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Lenovo Thinkpad T14 Gen 3 Firmware	All versions

Running on/with	Platform Versions
Lenovo Thinkpad T14 Gen 3	All versions

Configuration H

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Lenovo Thinkpad T14s Gen 3 Firmware	All versions

Running on/with	Platform Versions
Lenovo Thinkpad T14s Gen 3	All versions

Configuration I

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Lenovo Thinkpad T16 Gen 1 Firmware	All versions

Running on/with	Platform Versions
Lenovo Thinkpad T16 Gen 1	All versions

Configuration J

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Lenovo Thinkpad L14 Gen 3 Firmware	Before 1.23

Running on/with	Platform Versions
Lenovo Thinkpad L14 Gen 3	All versions

Configuration K

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Lenovo Thinkpad L14 Gen 4 Firmware	Before 1.1

Running on/with	Platform Versions
Lenovo Thinkpad L14 Gen 4	All versions

Configuration L

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Lenovo Thinkpad L15 Gen 3 Firmware	Before 1.23

Running on/with	Platform Versions
Lenovo Thinkpad L15 Gen 3	All versions

Configuration M

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Lenovo Thinkpad L15 Gen 4 Firmware	Before 1.1

Running on/with	Platform Versions
Lenovo Thinkpad L15 Gen 4	All versions

Configuration N

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Lenovo Thinkpad L13 Yoga Gen 4 Firmware	All versions

Running on/with	Platform Versions
Lenovo Thinkpad L13 Yoga Gen 4	All versions

Configuration O

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Lenovo Thinkpad L13 Yoga Gen 3 Firmware	Before 1.19

Running on/with	Platform Versions
Lenovo Thinkpad L13 Yoga Gen 3	All versions

Configuration P

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Lenovo Thinkpad L13 Yoga Gen 2 Firmware	All versions

Running on/with	Platform Versions
Lenovo Thinkpad L13 Yoga Gen 2	All versions

Configuration Q

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Lenovo Thinkpad L13 Gen 4 Firmware	All versions

Running on/with	Platform Versions
Lenovo Thinkpad L13 Gen 4	All versions

Configuration R

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Lenovo Thinkpad L13 Gen 3 Firmware	Before 1.19

Running on/with	Platform Versions
Lenovo Thinkpad L13 Gen 3	All versions

Configuration S

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Lenovo Thinkpad L13 Gen 2 Firmware	All versions

Running on/with	Platform Versions
Lenovo Thinkpad L13 Gen 2	All versions

Configuration T

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Lenovo Thinkpad S2 Yoga Gen 8 Firmware	All versions

Running on/with	Platform Versions
Lenovo Thinkpad S2 Yoga Gen 8	All versions

References (2)

https://support.lenovo.com/us/en/product_security/LEN-141775

Source: psirt@lenovo.com

Vendor Advisory

https://support.lenovo.com/us/en/product_security/LEN-141775

Source: af854a3a-2127-422b-91ae-364da2661108

Vendor Advisory

Timeline

No history available yet.