CVE-2022-3728 MEDIUM

CVE-2022-3728

Vendor Lenovo
Product ThinkPad T14s Gen 3 BIOS
Weakness CWE-1263
Published October 9, 2023
Last update September 19, 2024
View on NVD All CVEs

CVSS base score

6.1/10
Attack vector Physical
Attack complexity Low
Privileges required None
User interaction None
Confidentiality None
Integrity High

CVSS vector

CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:H

What the vulnerability does

01Description

A vulnerability was reported in ThinkPad T14s Gen 3 and X13 Gen3 that could cause the BIOS tamper detection mechanism to not trigger under specific circumstances which could allow unauthorized access.

Key dates

02Disclosure timeline

October 9, 2023 CVE published
September 19, 2024 Record updated