Thinkpad X13 Gen 3 Firmware

thinkpad_x13_gen_3_firmware

Vendor: Lenovo • 7 CVEs

CVEs (7)

CVE VENDORS PRODUCTS UPDATED PUBLISHED CVSS
CVE-2023-5078 1Lenovo 20Thinkpad L13 Gen 2 Firmware Thinkpad L13 Gen 3 FirmwareThinkpad L13 Gen 4 Firmware+17 more Jun 17, 2026 Nov 8, 2023 N/A· v4 6.7 MEDIUM· v3 N/A· v2 A vulnerability was reported in some ThinkPad BIOS that could allow a physical or local attacker with elevated privileges to tamper with BIOS firmware.
CVE-2022-4574 1Lenovo 54Thinkpad L14 Firmware Thinkpad L14 Gen 2 FirmwareThinkpad L15 Firmware+51 more Jun 17, 2026 Oct 30, 2023 N/A· v4 6.7 MEDIUM· v3 N/A· v2 An SMI handler input validation vulnerability in the BIOS of some ThinkPad models could allow an attacker with local access and elevated privileges to execute arbitrary code.
CVE-2022-48189 1Lenovo 85Thinkpad E14 Firmware Thinkpad E14 Gen 2 FirmwareThinkpad E14 Gen 4 Firmware+82 more Jun 17, 2026 Oct 30, 2023 N/A· v4 6.7 MEDIUM· v3 N/A· v2 An SMM driver input validation vulnerability in the BIOS of some ThinkPad models could allow an attacker with local access and elevated privileges to execute arbitrary code.
CVE-2022-48183 1Lenovo 2Thinkpad T14s Gen 3 Firmware Thinkpad X13 Gen 3 Firmware Jun 17, 2026 Oct 9, 2023 N/A· v4 6.8 MEDIUM· v3 N/A· v2 A vulnerability was reported in ThinkPad T14s Gen 3 and X13 Gen3 that could cause the BIOS tamper detection mechanism to not trigger under specific circumstances which could allow unauthorized access.
CVE-2022-48182 1Lenovo 2Thinkpad T14s Gen 3 Firmware Thinkpad X13 Gen 3 Firmware Jun 17, 2026 Oct 9, 2023 N/A· v4 6.8 MEDIUM· v3 N/A· v2 A vulnerability was reported in ThinkPad T14s Gen 3 and X13 Gen3 that could cause the BIOS tamper detection mechanism to not trigger under specific circumstances which could allow unauthorized access.
CVE-2022-3728 1Lenovo 2Thinkpad T14s Gen 3 Firmware Thinkpad X13 Gen 3 Firmware Jun 17, 2026 Oct 9, 2023 N/A· v4 6.8 MEDIUM· v3 N/A· v2 A vulnerability was reported in ThinkPad T14s Gen 3 and X13 Gen3 that could cause the BIOS tamper detection mechanism to not trigger under specific circumstances which could allow unauthorized access.
CVE-2023-2290 1Lenovo 85Thinkpad E14 Firmware Thinkpad E14 Gen 2 FirmwareThinkpad E14 Gen 4 Firmware+82 more Jun 17, 2026 Jun 26, 2023 N/A· v4 6.7 MEDIUM· v3 N/A· v2 A potential vulnerability in the LenovoFlashDeviceInterface SMI handler may allow an attacker with local access and elevated privileges to execute arbitrary code.