CVE-2022-3728 - A vulnerability was reported in ThinkPad T14s Gen 3 and X13 Gen3 that could cause the BIOS tamper detection mechanism to not trigger under specific circumstances which could allow unauthorized access

Back Back to CVE browser

MEDIUM

A vulnerability was reported in ThinkPad T14s Gen 3 and X13 Gen3 that could cause the BIOS tamper detection mechanism to not trigger under specific circumstances which could allow unauthorized access

Published Oct 9, 2023

6.8

MEDIUM

CVSS 3.1

EPSS 0.26%

Description

A vulnerability was reported in ThinkPad T14s Gen 3 and X13 Gen3 that could cause the BIOS tamper detection mechanism to not trigger under specific circumstances which could allow unauthorized access.

Affected products

Vendor Lenovo Product ThinkPad T14s Gen 3 BIOS Default
affected
- Version
  -
  Status
  affected
  Constraints
  <1.30 (R22ET60W)
Vendor Lenovo Product ThinkPad X13 Gen3 BIOS Default
affected
- Version
  -
  Status
  affected
  Constraints
  <1.30 (R22ET60W)

Default status is the baseline for the product, each version can override it (e.g. patched versions marked unaffected).

Vendor

Product

Default status

Versions

Lenovo

ThinkPad T14s Gen 3 BIOS

affected

Version	Status	Constraints
-	affected	<1.30 (R22ET60W)

Lenovo

ThinkPad X13 Gen3 BIOS

affected

Version	Status	Constraints
-	affected	<1.30 (R22ET60W)

Remediation

Vendor solution

Update system firmware to the version 1.30 (R22ET60W) or newer.

Weaknesses (1)

CWE-1263

References (1)

https://support.lenovo.com/us/en/product_security/LEN-106014
Vendor Advisory

Link	Providers	Tags
https://support.lenovo.com/us/en/product_security/LEN-106014		Vendor Advisory

Change history (0)

No recorded changes yet.

Sources

CVE.org / MITRE

Status PUBLISHED

Assigner lenovo

Published Oct 9, 2023

Updated Sep 19, 2024

Reserved Oct 27, 2022

Link CVE-2022-3728

CISA Vulnrichment

Updated Sep 19, 2024

NVD

Status Modified

Modified Jun 17, 2026

Link CVE-2022-3728

Red Hat

Severity n/a

Public date n/a

Links CVE-2022-3728