A vulnerability was reported in ThinkPad T14s Gen 3 and X13 Gen3 that could cause the…
Priority LOW 30CWE-1263Published · Updated
Key facts
- Attack vector
- Physical
- Privileges required
- None
- User interaction
- None
- Attack complexity
- Low
- Impact type
- —
- Confidentiality · integrity · availability
- High · High · High
- Fix status
- Fixed
Attack profile from CVSS 3.1 · NVD. Fix status from CNA.
Summary
A vulnerability was reported in ThinkPad T14s Gen 3 and X13 Gen3 that could cause the BIOS tamper detection mechanism to not trigger under specific circumstances which could allow unauthorized access.
Why it matters now
Exploitation None reported CISA SSVC · not in CISA KEV
EPSS 0.00261 17th percentileScored 2026-11-07
Fix Fixed ThinkPad T14s Gen 3 BIOS (Lenovo): 1.30 (R22ET60W)ThinkPad X13 Gen3 BIOS (Lenovo): 1.30 (R22ET60W)
SSVC decision points
CISA ADP · SSVC 2.0.3
- Exploitation
- None
- Automatable
- No
- Technical impact
- Partial
The decision (Track, Attend, Act) also depends on your mission and well-being impact; see CISA's SSVC guide.
Affected products
| Vendor | Product | Affected versions | Fixed in | Status | Source |
|---|---|---|---|---|---|
| Lenovo | ThinkPad T14s Gen 3 BIOS | to before 1.30 (R22ET60W) | 1.30 (R22ET60W) | Patch available | CNA |
| Lenovo | ThinkPad X13 Gen3 BIOS | to before 1.30 (R22ET60W) | 1.30 (R22ET60W) | Patch available | CNA |
- ThinkPad T14s Gen 3 BIOS VendorLenovo Affected to before 1.30 (R22ET60W) Fixed in 1.30 (R22ET60W) Patch available CNA
- ThinkPad X13 Gen3 BIOS VendorLenovo Affected to before 1.30 (R22ET60W) Fixed in 1.30 (R22ET60W) Patch available CNA
CPE configurations NVD · 4
| CPE | Versions | Role | Vendor |
|---|---|---|---|
| cpe:2.3:o:lenovo:thinkpad_t14s_gen_3_firmware:*:*:*:*:*:*:*:* | before 1.30 | Vulnerable | Lenovo |
| cpe:2.3:h:lenovo:thinkpad_t14s_gen_3:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Lenovo |
| cpe:2.3:o:lenovo:thinkpad_x13_gen_3_firmware:*:*:*:*:*:*:*:* | before 1.30 | Vulnerable | Lenovo |
| cpe:2.3:h:lenovo:thinkpad_x13_gen_3:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Lenovo |
- cpe:2.3:o:lenovo:thinkpad_t14s_gen_3_firmware:*:*:*:*:*:*:*:* Versions before 1.30 Vulnerable ·Lenovo
- cpe:2.3:h:lenovo:thinkpad_t14s_gen_3:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Lenovo
- cpe:2.3:o:lenovo:thinkpad_x13_gen_3_firmware:*:*:*:*:*:*:*:* Versions before 1.30 Vulnerable ·Lenovo
- cpe:2.3:h:lenovo:thinkpad_x13_gen_3:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Lenovo
Remediation
- Fix · CNA ThinkPad T14s Gen 3 BIOS (Lenovo) Fixed in 1.30 (R22ET60W)
- Fix · CNA ThinkPad X13 Gen3 BIOS (Lenovo) Fixed in 1.30 (R22ET60W)
Timeline
- 2026-10-02 Threatist record created from CVE-2022-3728
- 2026-10-03 Alias added: GHSA-mqp3-jp6q-7jf7
References
More Lenovo Thinkpad T14s Gen 3 Firmware vulnerabilities
- TI-2023-04673 A vulnerability was reported in some ThinkPad BIOS that could allow a physical or local… CVSS 3.1MEDIUM 6.7
- TI-2023-02148 Out-of-bounds write in Lenovo ThinkPad CVSS 3.1MEDIUM 6.7
- TI-2022-23843 Improper input validation in Lenovo ThinkPad BIOS CVSS 3.1MEDIUM 6.7
- TI-2022-04178 Improper input validation in Lenovo ThinkPad BIOS CVSS 3.1MEDIUM 6.7
- TI-2022-23840 A vulnerability was reported in ThinkPad T14s Gen 3 and X13 Gen3 that could cause the… CVSS 3.1MEDIUM 6.8
- TI-2022-23839 A vulnerability was reported in ThinkPad T14s Gen 3 and X13 Gen3 that could cause the… CVSS 3.1MEDIUM 6.8
Sources
- CVE-2022-3728 · CVE Program
- CVE-2022-3728 · NVD
- FIRST EPSS
- GHSA-mqp3-jp6q-7jf7 · GitHub Advisory Database · CC BY 4.0
This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences