CVE-2023-4030

High

Description

A vulnerability was reported in BIOS for ThinkPad P14s Gen 2, P15s Gen 2, T14 Gen 2, and T15 Gen 2 that could cause the system to recover to insecure settings if the BIOS becomes corrupt.

SeverityHigh
CVSS8.4
Exploit probability—
ProductLenovo Thinkpad T15 Gen 2 Firmware
PublishedAug 17, 2023
First seenAug 17, 2023
Weakness typeCWE-636CWE-636

How to fix

Sources list no fixed version or patch link for this vulnerability.

Affected products

ProductAffected versionsFixed in
lenovo thinkpad_t15_gen_2_firmwareNo range specified—
lenovo thinkpad_p14s_gen_2_firmwareNo range specified—
lenovo thinkpad_p15s_gen_2_firmwareNo range specified—
lenovo thinkpad_t14_gen_2_firmwareNo range specified—

Check your version

Choose the product and enter the version you run to see whether it falls in the affected range.

In the Intelligence 360 plan

Attack Surface Management

See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.

CVE-2023-4030 · Lenovo Thinkpad T15 Gen 2 Firmware · Dark Radar