High severity7.8NVD Advisory· Published Jan 14, 2026· Updated Jun 17, 2026
CVE-2025-13455
CVE-2025-13455
Description
A vulnerability was reported in ThinkPlus configuration software that could allow a local authenticated user to bypass ThinkPlus device authentication and enroll an untrusted fingerprint.
Affected products
9cpe:2.3:o:lenovo:thinkplus_fu100_firmware:-:*:*:*:*:*:*:*+ 1 more
- cpe:2.3:o:lenovo:thinkplus_fu100_firmware:-:*:*:*:*:*:*:*
- (no CPE)range: Gen 1
cpe:2.3:o:lenovo:thinkplus_fu200_firmware:-:*:*:*:*:*:*:*+ 1 more
- cpe:2.3:o:lenovo:thinkplus_fu200_firmware:-:*:*:*:*:*:*:*
- (no CPE)range: Gen 1
cpe:2.3:o:lenovo:thinkplus_tu800_firmware:-:*:*:*:*:*:*:*+ 1 more
- cpe:2.3:o:lenovo:thinkplus_tu800_firmware:-:*:*:*:*:*:*:*
- (no CPE)range: Gen 1
cpe:2.3:o:lenovo:thinkplus_tsd303_firmware:-:*:*:*:*:*:*:*+ 1 more
- cpe:2.3:o:lenovo:thinkplus_tsd303_firmware:-:*:*:*:*:*:*:*
- (no CPE)range: Gen 1
Patches
Vulnerability mechanics
References
1- iknow.lenovo.com.cn/detail/436983nvdVendor Advisory
News mentions
0No linked articles in our index yet.