A vulnerability was reported in BIOS for ThinkPad P14s Gen 2, P15s Gen 2, T14 Gen 2, and T15 Gen 2 that could cause the system to recover to insecure settings if the BIOS becomes corrupt.
References
| Link | Resource |
|---|---|
| https://support.lenovo.com/us/en/product_security/LEN-134879 | Vendor Advisory |
Configurations
Configuration 1 (hide)
| AND |
|
Configuration 2 (hide)
| AND |
|
Configuration 3 (hide)
| AND |
|
Configuration 4 (hide)
| AND |
|
History
24 Aug 2023, 20:29
| Type | Values Removed | Values Added |
|---|---|---|
| CPE | cpe:2.3:o:lenovo:thinkpad_t14_gen_2_firmware:-:*:*:*:*:*:*:* cpe:2.3:o:lenovo:thinkpad_p14s_gen_2_firmware:-:*:*:*:*:*:*:* cpe:2.3:o:lenovo:thinkpad_t15_gen_2_firmware:-:*:*:*:*:*:*:* cpe:2.3:h:lenovo:thinkpad_p15s_gen_2:-:*:*:*:*:*:*:* cpe:2.3:h:lenovo:thinkpad_p14s_gen_2:-:*:*:*:*:*:*:* cpe:2.3:h:lenovo:thinkpad_t15_gen_2:-:*:*:*:*:*:*:* cpe:2.3:o:lenovo:thinkpad_p15s_gen_2_firmware:-:*:*:*:*:*:*:* cpe:2.3:h:lenovo:thinkpad_t14_gen_2:-:*:*:*:*:*:*:* |
|
| First Time |
Lenovo thinkpad P14s Gen 2 Firmware
Lenovo thinkpad P14s Gen 2 Lenovo thinkpad T15 Gen 2 Firmware Lenovo thinkpad T15 Gen 2 Lenovo thinkpad T14 Gen 2 Lenovo thinkpad T14 Gen 2 Firmware Lenovo thinkpad P15s Gen 2 Firmware Lenovo Lenovo thinkpad P15s Gen 2 |
|
| CVSS |
v2 : v3 : |
v2 : unknown
v3 : 7.8 |
| References | (MISC) https://support.lenovo.com/us/en/product_security/LEN-134879 - Vendor Advisory |
17 Aug 2023, 17:15
| Type | Values Removed | Values Added |
|---|---|---|
| New CVE |
Information
Published : 2023-08-17 17:15
Updated : 2024-02-28 20:33
NVD link : CVE-2023-4030
Mitre link : CVE-2023-4030
CVE.ORG link : CVE-2023-4030
JSON object : View
Products Affected
lenovo
- thinkpad_t14_gen_2
- thinkpad_p14s_gen_2
- thinkpad_p14s_gen_2_firmware
- thinkpad_p15s_gen_2
- thinkpad_t14_gen_2_firmware
- thinkpad_t15_gen_2
- thinkpad_p15s_gen_2_firmware
- thinkpad_t15_gen_2_firmware
CWE
CWE-636
Not Failing Securely ('Failing Open')