CVE-2023-4030 :: Enginsight Vulnerability Database

Provider	Type	Base Score	Atk. Vector	Atk. Complexity	Priv. Required	Vector
NIST	NIST	8.4 HIGH	LOCAL	LOW	NONE	CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
lenovo	CNA	8.4 HIGH	LOCAL	LOW	NONE	CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
CVE	ADP	---				---
CISA-ADP	ADP	---				---

Base Score

CVSS 3.x

EPSS Score

Percentile: 22%

Vendor	Product	Version
lenovo	thinkpad_t15_gen_2_firmware	-
lenovo	thinkpad_p14s_gen_2_firmware	-
lenovo	thinkpad_p15s_gen_2_firmware	-
lenovo	thinkpad_t14_gen_2_firmware	-

𝑥

= Vulnerable software versions

Common Weakness Enumeration

CWE-636 - Not Failing Securely ('Failing Open')
When the product encounters an error condition or failure, its design requires it to fall back to a state that is less secure than other options that are available, such as selecting the weakest encryption algorithm or using the most permissive access control restrictions.

References

https://support.lenovo.com/us/en/product_security/LEN-134879

https://support.lenovo.com/us/en/product_security/LEN-134879