{"id":"CVE-2025-12047","state":"PUBLISHED","title":"A vulnerability was reported in the Lenovo Scanner pro application during an internal security assessment that, under certain circumstances, could allow an attacker on the same log","description":"A vulnerability was reported in the Lenovo Scanner pro application during an internal security assessment that, under certain circumstances, could allow an attacker on the same logical network to disclose sensitive user files from the application.","publishedAt":"2025-11-12T19:18:57.396Z","updatedAt":"2025-11-12T21:03:27.695Z","severity":{"score":6,"label":"Medium","version":"4.0","vector":"CVSS:4.0/AV:A/AC:H/AT:P/PR:N/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N","source":"lenovo"},"assigner":"lenovo","products":["Lenovo Scanner Pro"],"affected":[{"vendor":"Lenovo","product":"Scanner Pro","defaultStatus":"unaffected","versions":[{"version":"0","status":"affected","lessThan":"1.2.7","versionType":"custom"}],"platforms":["Android"]}],"references":["https://iknow.lenovo.com.cn/detail/434327"],"weaknesses":["CWE-295"],"ingestedAt":"2026-10-29T20:08:31.050Z","source":{"repository":"CVEProject/cvelistV5","path":"cves/2025/12xxx/CVE-2025-12047.json","commit":"556c9d3a8cd17e218bb8e452ba7cd619a384ff47"},"raw":{"dataType":"CVE_RECORD","dataVersion":"5.2","cveMetadata":{"cveId":"CVE-2025-12047","state":"PUBLISHED","datePublished":"2025-11-12T19:18:57.396Z","dateUpdated":"2025-11-12T21:03:27.695Z","assignerShortName":"lenovo","assignerOrgId":"da227ddf-6e25-4b41-b023-0f976dcaca4b","dateReserved":"2025-10-21T20:07:41.750Z"},"containers":{"cna":{"descriptions":[{"lang":"en","value":"A vulnerability was reported in the Lenovo Scanner pro application during an internal security assessment that, under certain circumstances, could allow an attacker on the same logical network to disclose sensitive user files from the application."}],"affected":[{"vendor":"Lenovo","product":"Scanner Pro","defaultStatus":"unaffected","versions":[{"version":"0","status":"affected","lessThan":"1.2.7","versionType":"custom"}],"platforms":["Android"]}],"references":[{"url":"https://iknow.lenovo.com.cn/detail/434327"}],"metrics":[{"cvssV4_0":{"Automatable":"NOT_DEFINED","Recovery":"NOT_DEFINED","Safety":"NOT_DEFINED","attackComplexity":"HIGH","attackRequirements":"PRESENT","attackVector":"ADJACENT","baseScore":6,"baseSeverity":"MEDIUM","privilegesRequired":"NONE","providerUrgency":"NOT_DEFINED","subAvailabilityImpact":"NONE","subConfidentialityImpact":"NONE","subIntegrityImpact":"NONE","userInteraction":"NONE","valueDensity":"NOT_DEFINED","vectorString":"CVSS:4.0/AV:A/AC:H/AT:P/PR:N/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N","version":"4.0","vulnAvailabilityImpact":"NONE","vulnConfidentialityImpact":"HIGH","vulnIntegrityImpact":"NONE","vulnerabilityResponseEffort":"NOT_DEFINED"},"format":"CVSS","scenarios":[{"lang":"en","value":"GENERAL"}]},{"cvssV3_1":{"attackComplexity":"HIGH","attackVector":"ADJACENT_NETWORK","availabilityImpact":"NONE","baseScore":5.3,"baseSeverity":"MEDIUM","confidentialityImpact":"HIGH","integrityImpact":"NONE","privilegesRequired":"NONE","scope":"UNCHANGED","userInteraction":"NONE","vectorString":"CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N","version":"3.1"},"format":"CVSS","scenarios":[{"lang":"en","value":"GENERAL"}]}],"problemTypes":[{"descriptions":[{"cweId":"CWE-295","description":"CWE-295: Improper Certificate Validation","lang":"en","type":"CWE"}]}],"providerMetadata":{"shortName":"lenovo","orgId":"da227ddf-6e25-4b41-b023-0f976dcaca4b","dateUpdated":"2025-11-12T19:18:57.396Z"},"cpeApplicability":[{"nodes":[{"cpeMatch":[{"criteria":"cpe:2.3:a:lenovo:scanner_pro:*:*:android:*:*:*:*:*","versionEndExcluding":"1.2.7","versionStartIncluding":"0","vulnerable":true}],"negate":false,"operator":"OR"}],"operator":"OR"}],"solutions":[{"lang":"en","supportingMedia":[{"base64":false,"type":"text/html","value":"<div><div><div><p>Update Lenovo Scanner Pro application to version 1.2.7 or later.</p></div></div></div>"}],"value":"Update Lenovo Scanner Pro application to version 1.2.7 or later."}],"source":{"discovery":"UNKNOWN"},"x_generator":{"engine":"Vulnogram 0.3.0"}},"adp":[{"title":"CISA ADP Vulnrichment","metrics":[{"other":{"type":"ssvc","content":{"timestamp":"2025-11-12T20:37:17.874476Z","id":"CVE-2025-12047","options":[{"Exploitation":"none"},{"Automatable":"no"},{"Technical Impact":"partial"}],"role":"CISA Coordinator","version":"2.0.3"}}}],"providerMetadata":{"shortName":"CISA-ADP","orgId":"134c704f-9b21-4f2e-91b3-4a467353bcc0","dateUpdated":"2025-11-12T21:03:27.695Z"}}]}}}