CVE-2025-13455 — Lenovo / ThinkPlus FU100

CVE-2025-13455

Lenovo / ThinkPlus FU100 PUBLISHED

Description (CNA)

A vulnerability was reported in ThinkPlus configuration software that could allow a local authenticated user to bypass ThinkPlus device authentication and enroll an untrusted fingerprint.

Affected (CNA)

Vendor / product	Versions
Lenovo / ThinkPlus FU100	affected Gen 1
Lenovo / ThinkPlus FU200	affected Gen 1
Lenovo / ThinkPlus TU800	affected Gen 1
Lenovo / ThinkPlus TSD303	affected Gen 1

CWE

CWE-290

References

https://iknow.lenovo.com.cn/detail/436983

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.