Lenovo Thinkpad x13s Firmware vulnerabilities

4 CVEs affecting Lenovo Thinkpad x13s Firmware, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2022-4435, published 2023-01-05.

More from Lenovo.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

• CVE-2022-4435, published 2023-01-05. Medium severity, CVSS 4.4. EPSS: 0.2% chance of exploitation in the next 30 days. A buffer over-read vulnerability was reported in the ThinkPadX13s BIOS LenovoRemoteConfigUpdateDxe driver that could allow a local attacker with elevated privileges to cause information disclosure.
• CVE-2022-4434, published 2023-01-05. Medium severity, CVSS 4.4. EPSS: 0.2% chance of exploitation in the next 30 days. A buffer over-read vulnerability was reported in the ThinkPadX13s BIOS driver that could allow a local attacker with elevated privileges to cause information disclosure.
• CVE-2022-4433, published 2023-01-05. Medium severity, CVSS 4.4. EPSS: 0.2% chance of exploitation in the next 30 days. A buffer over-read vulnerability was reported in the ThinkPadX13s BIOS LenovoSetupConfigDxe driver that could allow a local attacker with elevated privileges to cause information disclosure.
• CVE-2022-4432, published 2023-01-05. Medium severity, CVSS 4.4. EPSS: 0.2% chance of exploitation in the next 30 days. A buffer over-read vulnerability was reported in the ThinkPadX13s BIOS PersistenceConfigDxe driver that could allow a local attacker with elevated privileges to cause information disclosure.