CVE Feed

    Dashboard / CVE / CVE-2023-4030

    CVE-2023-4030

    A vulnerability was reported in BIOS for ThinkPad P14s Gen 2, P15s Gen 2, T14 Gen 2, and T15 Gen 2 that could cause the system to recover to insecure settings if the BIOS becomes corrupt.

    Published:Aug 17, 2023
    Last Modified:Nov 21, 2024
    EPS:Aug 17, 2023
    EPSS Score:0.00072
    CVSS Score:8.4

    Affected Products

    Vendor
    Lenovo
    Product
    Thinkpad
    Vendor
    Lenovo
    Product
    Thinkpad P14s Gen 2
    Vendor
    Lenovo
    Product
    Thinkpad P14s Gen 2 Firmware
    Vendor
    Lenovo
    Product
    Thinkpad P15s Gen 2
    Vendor
    Lenovo
    Product
    Thinkpad P15s Gen 2 Firmware
    Vendor
    Lenovo
    Product
    Thinkpad T14 Gen 2
    Vendor
    Lenovo
    Product
    Thinkpad T14 Gen 2 Firmware
    Vendor
    Lenovo
    Product
    Thinkpad T15 Gen 2
    Vendor
    Lenovo
    Product
    Thinkpad T15 Gen 2 Firmware

    Exploits

    No exploit reference

    Common Attack Pattern Enumeration and Classification (CAPEC)

    No CAPEC recorded yet

    Related CVEs

    CVE-2023-4029 (CVSS 6.7) — A buffer overflow has been identified in the BoardUpdateAcpiDxe driver in some Lenovo ThinkPad products which …
    CVE-2019-6169 (CVSS 7.5) — A vulnerability reported in Lenovo Service Bridge before version 4.1.0.1 could allow unencrypted downloads ove…
    CVE-2019-6168 (CVSS 9.8) — A vulnerability reported in Lenovo Service Bridge before version 4.1.0.1 could allow remote code execution.…
    CVE-2019-6167 (CVSS 9.8) — A vulnerability reported in Lenovo Service Bridge before version 4.1.0.1 could allow remote code execution.…
    CVE-2019-6166 (CVSS 8.8) — A vulnerability reported in Lenovo Service Bridge before version 4.1.0.1 could allow cross-site request forger…
    CVE-2019-6163 (CVSS 5.5) — A denial of service vulnerability was reported in Lenovo System Update before version 5.07.0084 that could all…
    CVE-2019-6154 (CVSS 5.3) — A DLL search path vulnerability was reported in Lenovo Bootable Generator, prior to version Mar-2019, that cou…
    CVE-2007-1307 (CVSS 10) — Unspecified vulnerability in Lenovo Intel PRO/1000 LAN adapter before Build 135400, as used on IBM Lenovo Thin…

    Common Vulnerability Scoring System

    Attack Vector
    Network
    Adjacent
    Local
    Physical
    Privileges Required
    None
    Low
    High
    User Interaction
    None
    Required
    Scope
    Unchanged
    Changed
    Confidentiality
    None
    Low
    High
    Integrity
    None
    Low
    High
    Availability
    None
    Low
    High