Medium severity5.5NVD Advisory· Published Jan 14, 2026· Updated Jun 1, 2026
CVE-2025-13454
CVE-2025-13454
Description
A potential vulnerability was reported in ThinkPlus configuration software that could allow a local authenticated user to gain access to sensitive device information.
Affected products
9- cpe:2.3:o:lenovo:thinkplus_fu100_firmware:-:*:*:*:*:*:*:*
- cpe:2.3:o:lenovo:thinkplus_fu200_firmware:-:*:*:*:*:*:*:*
- cpe:2.3:o:lenovo:thinkplus_tsd303_firmware:-:*:*:*:*:*:*:*
- cpe:2.3:o:lenovo:thinkplus_tu800_firmware:-:*:*:*:*:*:*:*
- Lenovo/ThinkPlus FU100v5Range: Gen 1
- Lenovo/ThinkPlus FU200v5Range: Gen 1
- Lenovo/ThinkPlus TSD303v5Range: Gen 1
- Lenovo/ThinkPlus TU800v5Range: Gen 1
Patches
Vulnerability mechanics
References
1- iknow.lenovo.com.cn/detail/436983nvdVendor Advisory
News mentions
0No linked articles in our index yet.