CVE-2023-4030 HIGH

CVE-2023-4030

Vendor Lenovo

Product ThinkPad

Weakness CWE-636

Published August 17, 2023

Last update October 8, 2024

View on NVD All CVEs

CVSS base score

8.4/10

Attack vector Local

Attack complexity Low

Privileges required None

User interaction None

Confidentiality High

Integrity High

CVSS vector

CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

What the vulnerability does

01Description

A vulnerability was reported in BIOS for ThinkPad P14s Gen 2, P15s Gen 2, T14 Gen 2, and T15 Gen 2 that could cause the system to recover to insecure settings if the BIOS becomes corrupt.

Key dates

02Disclosure timeline

August 17, 2023 CVE published

October 8, 2024 Record updated

External resources

03References

NVD — National Vulnerability Database https://nvd.nist.gov/vuln/detail/CVE-2023-4030 CWE — Common Weakness Enumeration https://cwe.mitre.org/data/definitions/636.html

Related vulnerabilities

04Related CVE

CVE-2026-42423 OpenClaw < 2026.4.8 - strictInlineEval Approval Boundary Bypass via Approval-Timeout Fallback CVE-2025-41759 Use of wildcard (“*” or “all”) in Block list CVE-2024-43532 Remote Registry Service Elevation of Privilege Vulnerability CVE-2021-3614 CVE-2026-45781 MCP Registry: OCI ownership validation fails open on upstream rate limits, allowing attacker-controlled package claims