VYPR
← All advisories
Unrated severityNVD Advisory· Published Jan 14, 2026· Updated Jan 15, 2026

CVE-2025-13455

CVE-2025-13455

Description

A vulnerability was reported in ThinkPlus configuration software that could allow a local authenticated user to bypass ThinkPlus device authentication and enroll an untrusted fingerprint.

Affected products

5
  • ThinkPlus/ThinkPlusllm-create
  • Lenovo/ThinkPlus FU100v5
    Range: Gen 1
  • Lenovo/ThinkPlus FU200v5
    Range: Gen 1
  • Lenovo/ThinkPlus TSD303v5
    Range: Gen 1
  • Lenovo/ThinkPlus TU800v5
    Range: Gen 1

Patches

0

No patches discovered yet.

Vulnerability mechanics

AI mechanics synthesis has not run for this CVE yet.

References

1

News mentions

0

No linked articles in our index yet.