6.7
Medium
CVE-2023-5078 A vulnerability was reported in some ThinkPad BIOS that could allow a physical or local attacker with elevated…
Description
A vulnerability was reported in some ThinkPad BIOS that could allow a physical or local attacker with elevated privileges to tamper with BIOS firmware.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| ThinkPad BIOS | Versions not published | |
| ThinkPad | Versions not published |
Other CVEs of ThinkPad BIOS
The 10 CVEs of ThinkPad BIOS →
CVE-2022-4575
A vulnerability due to improper write protection of UEFI variables was reported in the BIOS of some ThinkPad models…
6.7
Medium
CVE-2022-48189
An SMM driver input validation vulnerability in the BIOS of some ThinkPad models could allow an attacker with local…
6.7
Medium
CVE-2022-4574
An SMI handler input validation vulnerability in the BIOS of some ThinkPad models could allow an attacker with local…
6.7
Medium
CVE-2022-1108
A potential vulnerability due to improper buffer validation in the SMI handler LenovoFlashDeviceInterface in Thinkpad X1…
6.7
Medium