CVE-2023-5078: Lenovo Thinkpad l13 Gen 2 Firmware

Medium severity, CVSS 6.7. EPSS: 0.2% chance of exploitation in the next 30 days.

A vulnerability was reported in some ThinkPad BIOS that could allow a physical or local attacker with elevated privileges to tamper with BIOS firmware.

Affected products

• Lenovo Thinkpad l13 Gen 2 Firmware: affected versions not specified
• Lenovo Thinkpad l13 Gen 3 Firmware: before 1.19 (fixed in 1.19)
• Lenovo Thinkpad l13 Gen 4 Firmware: affected versions not specified
• Lenovo Thinkpad l13 Yoga Gen 2 Firmware: affected versions not specified
• Lenovo Thinkpad l13 Yoga Gen 3 Firmware: before 1.19 (fixed in 1.19)
• Lenovo Thinkpad l13 Yoga Gen 4 Firmware: affected versions not specified
• Lenovo Thinkpad l14 Gen 3 Firmware: before 1.23 (fixed in 1.23)
• Lenovo Thinkpad l14 Gen 4 Firmware: before 1.1 (fixed in 1.1)
• Lenovo Thinkpad l15 Gen 3 Firmware: before 1.23 (fixed in 1.23)
• Lenovo Thinkpad l15 Gen 4 Firmware: before 1.1 (fixed in 1.1)
• Lenovo Thinkpad p14s Gen 3 Firmware: affected versions not specified
• Lenovo Thinkpad p16s Gen 1 Firmware: affected versions not specified
• Lenovo Thinkpad s2 Gen 8 Firmware: affected versions not specified
• Lenovo Thinkpad s2 Yoga Gen 6 Firmware: affected versions not specified
• Lenovo Thinkpad s2 Yoga Gen 7 Firmware: before 1.19 (fixed in 1.19)
• Lenovo Thinkpad s2 Yoga Gen 8 Firmware: affected versions not specified
• Lenovo Thinkpad t14 Gen 3 Firmware: affected versions not specified
• Lenovo Thinkpad t14s Gen 3 Firmware: affected versions not specified
• Lenovo Thinkpad t16 Gen 1 Firmware: affected versions not specified
• Lenovo Thinkpad x13 Gen 3 Firmware: affected versions not specified

Published 2023-11-08. Last modified 2026-06-17.