CVE-2025-12048

Lenovo / Scanner Pro PUBLISHED

Description (CNA)

An arbitrary file upload vulnerability was reported in the Lenovo Scanner Pro client during an internal security assessment that could allow remote code execution or unauthorized control of the affected system.

Affected (CNA)

Vendor / product	Versions
Lenovo / Scanner Pro	affected 0 through 1.0.0.4

CWE

CWE-434

References

https://iknow.lenovo.com.cn/detail/434326

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.