description:
A vulnerability was reported in ThinkPad T14s Gen 3 and X13 Gen3 that could cause the BIOS tamper detection mechanism to not trigger under specific circumstances which could allow unauthorized access.
problem types: CWE-1263: Improper Physical Access Control
affected:
{
defaultStatus: affected
product: ThinkPad T14s Gen 3 BIOS
vendor: Lenovo
versions:
lessThan: 1.30 (R22ET60W), status: affected, version:  , versionType: custom
}
{
defaultStatus: affected
product: ThinkPad X13 Gen3 BIOS
vendor: Lenovo
versions:
lessThan: 1.30 (R22ET60W), status: affected, version:  , versionType: semver
}
metrics:
cvssV3_1: [
attackComplexity: LOW
attackVector: PHYSICAL
availabilityImpact: HIGH
baseScore: 6.1
baseSeverity: MEDIUM
confidentialityImpact: NONE
integrityImpact: HIGH
privilegesRequired: NONE
scope: UNCHANGED
userInteraction: NONE
vectorString: CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:H
version: 3.1
]
format: CVSS
scenarios: GENERAL
solutions:
Update system firmware to the version 1.30 (R22ET60W)
or newer.