CVE-2023-4030 - A vulnerability was reported in BIOS for ThinkPad P14s Gen 2, P15s Gen 2, T14 Gen 2, and T15 Gen 2 that could cause the system to recover to insecure settings if the BIOS becomes corrupt

Back Back to CVE browser

HIGH

A vulnerability was reported in BIOS for ThinkPad P14s Gen 2, P15s Gen 2, T14 Gen 2, and T15 Gen 2 that could cause the system to recover to insecure settings if the BIOS becomes corrupt

Published Aug 17, 2023

8.4

HIGH

CVSS 3.1

EPSS 0.19%

Description

A vulnerability was reported in BIOS for ThinkPad P14s Gen 2, P15s Gen 2, T14 Gen 2, and T15 Gen 2 that could cause the system to recover to insecure settings if the BIOS becomes corrupt.

Affected products

Vendor Lenovo Product ThinkPad Default
unaffected
Affected
- various

Default status is the baseline for the product. Each version can override it (patched versions can be marked unaffected).

Vendor	Product	Default status	Versions
Lenovo	ThinkPad	unaffected	Affected various

Vendor Lenovo Product Thinkpad Default
unaffected
Affected
- p14_gen2
- p15_gen2
- t14_gen2
- t15_gen2

Default status is the baseline for the product. Each version can override it (patched versions can be marked unaffected).

Vendor	Product	Default status	Versions
Lenovo	Thinkpad	unaffected	Affected p14_gen2 p15_gen2 t14_gen2 t15_gen2

Remediation

Vendor solution

Update system firmware to the version (or newer) indicated for your model in the Product Impact section in LEN-134879.

Weaknesses (1)

CWE-636

References (2)

https://euvd.enisa.europa.eu/vulnerability/EUVD-2023-53923
Advisory
https://support.lenovo.com/us/en/product_security/LEN-134879
Vendor Advisory

Link	Providers	Tags
https://euvd.enisa.europa.eu/vulnerability/EUVD-2023-53923		Advisory
https://support.lenovo.com/us/en/product_security/LEN-134879		Vendor Advisory

Change history (0)

No recorded changes yet.

Sources

CVE.org / MITRE

Status PUBLISHED

Assigner lenovo

Published Aug 17, 2023

Updated Oct 8, 2024

Reserved Jul 31, 2023

Link CVE-2023-4030

CISA Vulnrichment

Updated Oct 8, 2024

NVD

Status Modified

Modified Jun 17, 2026

Link CVE-2023-4030

Red Hat

No data

ENISA EUVD

Assigner lenovo

Published Aug 17, 2023

Updated Oct 8, 2024

Link EUVD-2023-53923

GitHub

No data