PT-2023-13523 · Lenovo · Thinkpad X13 Gen3+1

Published 2023-10-09 · Updated 2023-10-12 · CVE-2022-3728

Positive Technologies (AI Summary)

CVSS v3.1

6.8

Medium

Base vector

AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions ThinkPad T14s Gen 3 (affected versions not specified) ThinkPad X13 Gen3 (affected versions not specified)

Description A vulnerability was reported that could cause the BIOS tamper detection mechanism to not trigger under specific circumstances, which could allow unauthorized access.

Recommendations For ThinkPad T14s Gen 3, at the moment, there is no information about a newer version that contains a fix for this vulnerability. For ThinkPad X13 Gen3, at the moment, there is no information about a newer version that contains a fix for this vulnerability.

Weakness Enumeration

CWE-1263

Related Identifiers

CVE-2022-3728

Affected Products

Thinkpad T14S Gen 3

Thinkpad X13 Gen3

References · 4

• https://osv.dev/vulnerability/CVE-2022-3728 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2022-3728 · Security Note
• https://support.lenovo.com/us/en/product_security/LEN-106014 · Vendor Advisory
• https://t.me/cibsecurity/71863 · Telegram Post