high7.8
CVE-2025-13455
A vulnerability was reported in ThinkPlus configuration software that could allow a local authenticated user to bypass ThinkPlus device authentication and enro…
Impact
A vulnerability was reported in ThinkPlus configuration software that could allow a local authenticated user to bypass ThinkPlus device authentication and enroll an untrusted fingerprint.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Lenovo | Thinkplus Fu100 Firmware | All versions |
| Lenovo | Thinkplus Fu200 Firmware | All versions |
| Lenovo | Thinkplus Tu800 Firmware | All versions |
| Lenovo | Thinkplus Tsd303 Firmware | All versions |