Vulnerability Description
A vulnerability was reported in some ThinkPad BIOS that could allow a physical or local attacker with elevated privileges to tamper with BIOS firmware.
CVSS Score
MEDIUM
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Lenovo | Thinkpad X13 Gen 3 Firmware | - |
| Lenovo | Thinkpad X13 Gen 3 | - |
| Lenovo | Thinkpad S2 Yoga Gen 7 Firmware | < 1.19 |
| Lenovo | Thinkpad S2 Yoga Gen 7 | - |
| Lenovo | Thinkpad S2 Yoga Gen 6 Firmware | - |
| Lenovo | Thinkpad S2 Yoga Gen 6 | - |
| Lenovo | Thinkpad S2 Gen 8 Firmware | - |
| Lenovo | Thinkpad S2 Gen 8 | - |
| Lenovo | Thinkpad P14S Gen 3 Firmware | - |
| Lenovo | Thinkpad P14S Gen 3 | - |
| Lenovo | Thinkpad P16S Gen 1 Firmware | - |
| Lenovo | Thinkpad P16S Gen 1 | - |
| Lenovo | Thinkpad T14 Gen 3 Firmware | - |
| Lenovo | Thinkpad T14 Gen 3 | - |
| Lenovo | Thinkpad T14S Gen 3 Firmware | - |
| Lenovo | Thinkpad T14S Gen 3 | - |
| Lenovo | Thinkpad T16 Gen 1 Firmware | - |
| Lenovo | Thinkpad T16 Gen 1 | - |
| Lenovo | Thinkpad L14 Gen 3 Firmware | < 1.23 |
| Lenovo | Thinkpad L14 Gen 3 | - |
References
- https://support.lenovo.com/us/en/product_security/LEN-141775Vendor Advisory
- https://support.lenovo.com/us/en/product_security/LEN-141775Vendor Advisory
FAQ
What is CVE-2023-5078?
CVE-2023-5078 is a vulnerability with a CVSS score of 6.7 (MEDIUM). A vulnerability was reported in some ThinkPad BIOS that could allow a physical or local attacker with elevated privileges to tamper with BIOS firmware.
How severe is CVE-2023-5078?
CVE-2023-5078 has been rated MEDIUM with a CVSS base score of 6.7/10. Review the CVSS metrics above for detailed severity breakdown.
Is there a patch for CVE-2023-5078?
Check the references section above for vendor advisories and patch information. Affected products include: Lenovo Thinkpad X13 Gen 3 Firmware, Lenovo Thinkpad X13 Gen 3, Lenovo Thinkpad S2 Yoga Gen 7 Firmware, Lenovo Thinkpad S2 Yoga Gen 7, Lenovo Thinkpad S2 Yoga Gen 6 Firmware.