CVE-2023-5078: Medium severity lenovo thinkpad x13 gen 3 firmware vulnerability
Published Nov 8, 2023
·Updated
A vulnerability was reported in some ThinkPad BIOS that could allow a physical or local attacker with elevated privileges to tamper with BIOS firmware.
Affected Software
40 affected components
All of the following
Lenovo Thinkpad X13 Gen 3 Firmware
Lenovo Thinkpad X13 Gen 3
All of the following
Lenovo Thinkpad S2 Yoga Gen 7 Firmware<1.19
Lenovo Thinkpad S2 Yoga Gen 7
All of the following
Lenovo Thinkpad S2 Yoga Gen 6 Firmware
Lenovo Thinkpad S2 Yoga Gen 6
All of the following
Lenovo Thinkpad S2 Gen 8 Firmware
Lenovo Thinkpad S2 Gen 8
All of the following
Lenovo Thinkpad P14s Gen 3 Firmware
Lenovo Thinkpad P14s Gen 3
All of the following
Lenovo Thinkpad P16s Gen 1 Firmware
Lenovo Thinkpad P16s Gen 1
All of the following
Lenovo Thinkpad T14 Gen 3 Firmware
Lenovo Thinkpad T14 Gen 3
All of the following
Lenovo Thinkpad T14s Gen 3 Firmware
Lenovo Thinkpad T14s Gen 3
All of the following
Lenovo Thinkpad T16 Gen 1 Firmware
Lenovo Thinkpad T16 Gen 1
All of the following
Lenovo Thinkpad L14 Gen 3 Firmware<1.23
Lenovo Thinkpad L14 Gen 3
All of the following
Lenovo Thinkpad L14 Gen 4 Firmware<1.1
Lenovo Thinkpad L14 Gen 4
All of the following
Lenovo Thinkpad L15 Gen 3 Firmware<1.23
Lenovo Thinkpad L15 Gen 3
All of the following
Lenovo Thinkpad L15 Gen 4 Firmware<1.1
Lenovo Thinkpad L15 Gen 4
All of the following
Lenovo Thinkpad L13 Yoga Gen 4 Firmware
Lenovo Thinkpad L13 Yoga Gen 4
All of the following
Lenovo Thinkpad L13 Yoga Gen 3 Firmware<1.19
Lenovo Thinkpad L13 Yoga Gen 3
All of the following
Lenovo Thinkpad L13 Yoga Gen 2 Firmware
Lenovo Thinkpad L13 Yoga Gen 2
All of the following
Lenovo Thinkpad L13 Gen 4 Firmware
Lenovo Thinkpad L13 Gen 4
All of the following
Lenovo Thinkpad L13 Gen 3 Firmware<1.19
Lenovo Thinkpad L13 Gen 3
All of the following
Lenovo Thinkpad L13 Gen 2 Firmware
Lenovo Thinkpad L13 Gen 2
All of the following
Lenovo Thinkpad S2 Yoga Gen 8 Firmware
Lenovo Thinkpad S2 Yoga Gen 8
Remediation
Information
Update system firmware to the version (or newer) indicated for your model in the advisory: https://support.lenovo.com/us/en/product_security/LEN-141775
Event History
Nov 8, 2023
CVE Published
via MITRE·10:02 PM
Data Sourced
via MITRE·10:02 PM
RemedyDescriptionSeverityWeakness
Data Sourced
via NVD·10:15 PM
DescriptionSeverityAffected Software
Frequently Asked Questions
1
What is the vulnerability ID?
The vulnerability ID is CVE-2023-5078.
2
What is the severity of CVE-2023-5078?
The severity of CVE-2023-5078 is medium.
3
How does CVE-2023-5078 affect Lenovo Thinkpad X13 Gen 3?
Lenovo Thinkpad X13 Gen 3 is affected by CVE-2023-5078.
4
How can a physical or local attacker with elevated privileges exploit CVE-2023-5078?
A physical or local attacker with elevated privileges can exploit CVE-2023-5078 to tamper with BIOS firmware.
5
Where can I find more information about CVE-2023-5078?
You can find more information about CVE-2023-5078 at the following link: [CVE-2023-5078](https://support.lenovo.com/us/en/product_security/LEN-141775)