{"id":"CVE-2025-10495","state":"PUBLISHED","title":"A potential vulnerability was reported in the Lenovo PC Manager, Lenovo App Store, Lenovo Browser, and Lenovo Legion Zone client applications that, under certain conditions, could ","description":"A potential vulnerability was reported in the Lenovo PC Manager, Lenovo App Store, Lenovo Browser, and Lenovo Legion Zone client applications that, under certain conditions, could allow an attacker on the same logical network to execute arbitrary code.","publishedAt":"2025-11-12T19:18:44.859Z","updatedAt":"2026-02-26T16:57:09.944Z","severity":{"score":7.7,"label":"High","version":"4.0","vector":"CVSS:4.0/AV:A/AC:L/AT:P/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N","source":"lenovo"},"assigner":"lenovo","products":["Lenovo App Store","Lenovo PC Manager","Lenovo Browser","Lenovo Legion Zone"],"affected":[{"vendor":"Lenovo","product":"App Store","defaultStatus":"unaffected","versions":[{"version":"0","status":"affected","lessThan":"9.0.2530.1027","versionType":"custom"}]},{"vendor":"Lenovo","product":"PC Manager","defaultStatus":"unaffected","versions":[{"version":"0","status":"affected","lessThan":"5.1.140.9262","versionType":"custom"}]},{"vendor":"Lenovo","product":"Browser","defaultStatus":"unaffected","versions":[{"version":"0","status":"affected","lessThan":"9.0.6.9111","versionType":"custom"}]},{"vendor":"Lenovo","product":"Legion Zone","defaultStatus":"unaffected","versions":[{"version":"0","status":"affected","lessThan":"2.0.21","versionType":"custom"}]}],"references":["https://iknow.lenovo.com.cn/detail/434328"],"weaknesses":["CWE-295"],"ingestedAt":"2026-10-29T20:08:20.985Z","source":{"repository":"CVEProject/cvelistV5","path":"cves/2025/10xxx/CVE-2025-10495.json","commit":"556c9d3a8cd17e218bb8e452ba7cd619a384ff47"},"raw":{"dataType":"CVE_RECORD","dataVersion":"5.2","cveMetadata":{"cveId":"CVE-2025-10495","state":"PUBLISHED","datePublished":"2025-11-12T19:18:44.859Z","dateUpdated":"2026-02-26T16:57:09.944Z","assignerShortName":"lenovo","assignerOrgId":"da227ddf-6e25-4b41-b023-0f976dcaca4b","dateReserved":"2025-09-15T19:25:35.895Z"},"containers":{"cna":{"descriptions":[{"lang":"en","value":"A potential vulnerability was reported in the Lenovo PC Manager, Lenovo App Store, Lenovo Browser, and Lenovo Legion Zone client applications that, under certain conditions, could allow an attacker on the same logical network to execute arbitrary code."}],"affected":[{"vendor":"Lenovo","product":"App Store","defaultStatus":"unaffected","versions":[{"version":"0","status":"affected","lessThan":"9.0.2530.1027","versionType":"custom"}]},{"vendor":"Lenovo","product":"PC Manager","defaultStatus":"unaffected","versions":[{"version":"0","status":"affected","lessThan":"5.1.140.9262","versionType":"custom"}]},{"vendor":"Lenovo","product":"Browser","defaultStatus":"unaffected","versions":[{"version":"0","status":"affected","lessThan":"9.0.6.9111","versionType":"custom"}]},{"vendor":"Lenovo","product":"Legion Zone","defaultStatus":"unaffected","versions":[{"version":"0","status":"affected","lessThan":"2.0.21","versionType":"custom"}]}],"references":[{"url":"https://iknow.lenovo.com.cn/detail/434328"}],"metrics":[{"cvssV4_0":{"Automatable":"NOT_DEFINED","Recovery":"NOT_DEFINED","Safety":"NOT_DEFINED","attackComplexity":"LOW","attackRequirements":"PRESENT","attackVector":"ADJACENT","baseScore":7.7,"baseSeverity":"HIGH","privilegesRequired":"NONE","providerUrgency":"NOT_DEFINED","subAvailabilityImpact":"NONE","subConfidentialityImpact":"NONE","subIntegrityImpact":"NONE","userInteraction":"NONE","valueDensity":"NOT_DEFINED","vectorString":"CVSS:4.0/AV:A/AC:L/AT:P/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N","version":"4.0","vulnAvailabilityImpact":"HIGH","vulnConfidentialityImpact":"HIGH","vulnIntegrityImpact":"HIGH","vulnerabilityResponseEffort":"NOT_DEFINED"},"format":"CVSS","scenarios":[{"lang":"en","value":"GENERAL"}]},{"cvssV3_1":{"attackComplexity":"HIGH","attackVector":"ADJACENT_NETWORK","availabilityImpact":"HIGH","baseScore":7.5,"baseSeverity":"HIGH","confidentialityImpact":"HIGH","integrityImpact":"HIGH","privilegesRequired":"NONE","scope":"UNCHANGED","userInteraction":"NONE","vectorString":"CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H","version":"3.1"},"format":"CVSS","scenarios":[{"lang":"en","value":"GENERAL"}]}],"problemTypes":[{"descriptions":[{"cweId":"CWE-295","description":"CWE-295: Improper Certificate Validation","lang":"en","type":"CWE"}]}],"providerMetadata":{"shortName":"lenovo","orgId":"da227ddf-6e25-4b41-b023-0f976dcaca4b","dateUpdated":"2025-11-12T19:18:44.859Z"},"cpeApplicability":[{"nodes":[{"cpeMatch":[{"criteria":"cpe:2.3:a:lenovo:app_store:*:*:*:*:*:*:*:*","versionEndExcluding":"9.0.2530.1027","versionStartIncluding":"0","vulnerable":true}],"negate":false,"operator":"OR"},{"cpeMatch":[{"criteria":"cpe:2.3:a:lenovo:pc_manager:*:*:*:*:*:*:*:*","versionEndExcluding":"5.1.140.9262","versionStartIncluding":"0","vulnerable":true}],"negate":false,"operator":"OR"},{"cpeMatch":[{"criteria":"cpe:2.3:a:lenovo:browser:*:*:*:*:*:*:*:*","versionEndExcluding":"9.0.6.9111","versionStartIncluding":"0","vulnerable":true}],"negate":false,"operator":"OR"},{"cpeMatch":[{"criteria":"cpe:2.3:a:lenovo:legion_zone:*:*:*:*:*:*:*:*","versionEndExcluding":"2.0.21","versionStartIncluding":"0","vulnerable":true}],"negate":false,"operator":"OR"}],"operator":"OR"}],"credits":[{"lang":"en","type":"finder","value":"Lenovo thanks Wanjie from Huazhong University of Science and Technology for reporting this issue."}],"solutions":[{"lang":"en","supportingMedia":[{"base64":false,"type":"text/html","value":"Update Lenovo App Store Client to version 9.0.2530.1027 or later.<br>"}],"value":"Update Lenovo App Store Client to version 9.0.2530.1027 or later."},{"lang":"en","supportingMedia":[{"base64":false,"type":"text/html","value":"Update Lenovo PC Manager to version 5.1.140.9262 or later.<br>"}],"value":"Update Lenovo PC Manager to version 5.1.140.9262 or later."},{"lang":"en","supportingMedia":[{"base64":false,"type":"text/html","value":"Update Lenovo Browser Client to version 9.0.6.9111 or later.<br>"}],"value":"Update Lenovo Browser Client to version 9.0.6.9111 or later."},{"lang":"en","supportingMedia":[{"base64":false,"type":"text/html","value":"Update Legion Zone Client to version 2.0.21 or later.<br>"}],"value":"Update Legion Zone Client to version 2.0.21 or later."}],"source":{"discovery":"UNKNOWN"},"x_generator":{"engine":"Vulnogram 0.3.0"}},"adp":[{"title":"CISA ADP Vulnrichment","metrics":[{"other":{"type":"ssvc","content":{"id":"CVE-2025-10495","role":"CISA Coordinator","options":[{"Exploitation":"none"},{"Automatable":"no"},{"Technical Impact":"total"}],"version":"2.0.3","timestamp":"2025-11-13T04:55:37.393427Z"}}}],"providerMetadata":{"shortName":"CISA-ADP","orgId":"134c704f-9b21-4f2e-91b3-4a467353bcc0","dateUpdated":"2026-02-26T16:57:09.944Z"}}]}}}