A vulnerability was reported in ThinkPad T14s Gen 3 and X13 Gen3 that could cause the…
Priority LOW 30CWE-1263Published · Updated
Key facts
- Attack vector
- Physical
- Privileges required
- None
- User interaction
- None
- Attack complexity
- Low
- Impact type
- —
- Confidentiality · integrity · availability
- High · High · High
- Fix status
- Fixed
Attack profile from CVSS 3.1 · NVD. Fix status from CNA.
Summary
A vulnerability was reported in ThinkPad T14s Gen 3 and X13 Gen3 that could cause the BIOS tamper detection mechanism to not trigger under specific circumstances which could allow unauthorized access.
Why it matters now
Exploitation None reported CISA SSVC · not in CISA KEV
EPSS 0.00261 17th percentileScored 2026-11-07
Fix Fixed ThinkPad T14s X13 Gen3 BIOS - Windows (Lenovo): 1.30 (R22ET60W)ThinkPad X13 Gen3 BIOS - Windows (Lenovo): 1.30 (R22ET60W)+2 more products
SSVC decision points
CISA ADP · SSVC 2.0.3
- Exploitation
- None
- Automatable
- No
- Technical impact
- Partial
The decision (Track, Attend, Act) also depends on your mission and well-being impact; see CISA's SSVC guide.
Affected products
| Vendor | Product | Affected versions | Fixed in | Status | Source |
|---|---|---|---|---|---|
| Lenovo | ThinkPad T14s X13 Gen3 BIOS - Windows | to before 1.30 (R22ET60W) | 1.30 (R22ET60W) | Patch available | CNA |
| Lenovo | ThinkPad X13 Gen3 BIOS - Windows | to before 1.30 (R22ET60W) | 1.30 (R22ET60W) | Patch available | CNA |
| Lenovo | ThinkPad T14s Gen 3 BIOS - Linux | to before 1.35 (N3CET54W) | 1.35 (N3CET54W) | Patch available | CNA |
| Lenovo | ThinkPad X13 Gen3 BIOS - Linux | to before 1.35 (N3CET54W) | 1.35 (N3CET54W) | Patch available | CNA |
- ThinkPad T14s X13 Gen3 BIOS - Windows VendorLenovo Affected to before 1.30 (R22ET60W) Fixed in 1.30 (R22ET60W) Patch available CNA
- ThinkPad X13 Gen3 BIOS - Windows VendorLenovo Affected to before 1.30 (R22ET60W) Fixed in 1.30 (R22ET60W) Patch available CNA
- ThinkPad T14s Gen 3 BIOS - Linux VendorLenovo Affected to before 1.35 (N3CET54W) Fixed in 1.35 (N3CET54W) Patch available CNA
- ThinkPad X13 Gen3 BIOS - Linux VendorLenovo Affected to before 1.35 (N3CET54W) Fixed in 1.35 (N3CET54W) Patch available CNA
CPE configurations NVD · 8
| CPE | Versions | Role | Vendor |
|---|---|---|---|
| cpe:2.3:o:lenovo:thinkpad_t14s_gen_3_firmware:*:*:*:*:*:*:*:* | before 1.30 | Vulnerable | Lenovo |
| cpe:2.3:h:lenovo:thinkpad_t14s_gen_3:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Lenovo |
| cpe:2.3:o:microsoft:windows:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Microsoft |
| cpe:2.3:o:lenovo:thinkpad_x13_gen_3_firmware:*:*:*:*:*:*:*:* | before 1.30 | Vulnerable | Lenovo |
| cpe:2.3:h:lenovo:thinkpad_x13_gen_3:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Lenovo |
| cpe:2.3:o:lenovo:thinkpad_t14s_gen_3_firmware:*:*:*:*:*:*:*:* | before 1.35 | Vulnerable | Lenovo |
| cpe:2.3:o:linux:linux_kernel:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Linux |
| cpe:2.3:o:lenovo:thinkpad_x13_gen_3_firmware:*:*:*:*:*:*:*:* | before 1.35 | Vulnerable | Lenovo |
- cpe:2.3:o:lenovo:thinkpad_t14s_gen_3_firmware:*:*:*:*:*:*:*:* Versions before 1.30 Vulnerable ·Lenovo
- cpe:2.3:h:lenovo:thinkpad_t14s_gen_3:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Lenovo
- cpe:2.3:o:microsoft:windows:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Microsoft
- cpe:2.3:o:lenovo:thinkpad_x13_gen_3_firmware:*:*:*:*:*:*:*:* Versions before 1.30 Vulnerable ·Lenovo
- cpe:2.3:h:lenovo:thinkpad_x13_gen_3:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Lenovo
- cpe:2.3:o:lenovo:thinkpad_t14s_gen_3_firmware:*:*:*:*:*:*:*:* Versions before 1.35 Vulnerable ·Lenovo
- cpe:2.3:o:linux:linux_kernel:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Linux
- cpe:2.3:o:lenovo:thinkpad_x13_gen_3_firmware:*:*:*:*:*:*:*:* Versions before 1.35 Vulnerable ·Lenovo
Remediation
- Fix · CNA ThinkPad T14s X13 Gen3 BIOS - Windows (Lenovo) Fixed in 1.30 (R22ET60W)
- Fix · CNA ThinkPad X13 Gen3 BIOS - Windows (Lenovo) Fixed in 1.30 (R22ET60W)
- Fix · CNA ThinkPad T14s Gen 3 BIOS - Linux (Lenovo) Fixed in 1.35 (N3CET54W)
- Fix · CNA ThinkPad X13 Gen3 BIOS - Linux (Lenovo) Fixed in 1.35 (N3CET54W)
Fixed in the same release
Records fixed by the same vendor advisory or release, as the CNA lists them.
- Release ·
Lenovo ThinkPad T14s Gen 3 BIOS - Linux, ThinkPad T14s X13 Gen3 BIOS - Windows and 2 more products 1.30 (R22ET60W), 1.35 (N3CET54W)
2 records Highest priority Priority LOW 2 LOW
Other records, highest priority first
- TI-2022-23840 A vulnerability was reported in ThinkPad T14s Gen 3 and X13 Gen3 that could cause the…Priority LOW 30
Timeline
- 2026-10-02 Threatist record created from CVE-2022-48182
- 2026-10-03 Alias added: GHSA-h39p-q7ch-cj9p
References
More Lenovo Thinkpad T14s Gen 3 Firmware vulnerabilities
- TI-2023-04673 A vulnerability was reported in some ThinkPad BIOS that could allow a physical or local… CVSS 3.1MEDIUM 6.7
- TI-2023-02148 Out-of-bounds write in Lenovo ThinkPad CVSS 3.1MEDIUM 6.7
- TI-2022-23843 Improper input validation in Lenovo ThinkPad BIOS CVSS 3.1MEDIUM 6.7
- TI-2022-04178 Improper input validation in Lenovo ThinkPad BIOS CVSS 3.1MEDIUM 6.7
- TI-2022-23840 A vulnerability was reported in ThinkPad T14s Gen 3 and X13 Gen3 that could cause the… CVSS 3.1MEDIUM 6.8
- TI-2022-03423 A vulnerability was reported in ThinkPad T14s Gen 3 and X13 Gen3 that could cause the… CVSS 3.1MEDIUM 6.8
Sources
- CVE-2022-48182 · CVE Program
- CVE-2022-48182 · NVD
- FIRST EPSS
- GHSA-h39p-q7ch-cj9p · GitHub Advisory Database · CC BY 4.0
This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences