Vulnerability Details CVE-2025-13455
A vulnerability was reported in ThinkPlus configuration software that could allow a local authenticated user to bypass ThinkPlus device authentication and enroll an untrusted fingerprint.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.0
EPSS Ranking 5.1%
CVSS Severity
CVSS v3 Score 7.8
References
Products affected by CVE-2025-13455
-
cpe:2.3:h:lenovo:thinkplus_fu100:gen1
-
cpe:2.3:h:lenovo:thinkplus_fu200:gen1
-
cpe:2.3:h:lenovo:thinkplus_tsd303:gen1
-
cpe:2.3:h:lenovo:thinkplus_tu800:gen1
-
cpe:2.3:o:lenovo:thinkplus_fu100_firmware:-
-
cpe:2.3:o:lenovo:thinkplus_fu200_firmware:-
-
cpe:2.3:o:lenovo:thinkplus_tsd303_firmware:-
-
cpe:2.3:o:lenovo:thinkplus_tu800_firmware:-