Skip to content
CVE PROGRAM SOURCE RECORD7.3 High

CVE-2025-13455

A vulnerability was reported in ThinkPlus configuration software that could allow a local authenticated user to bypass ThinkPlus device authentication and enroll an untrusted finge

Description

A vulnerability was reported in ThinkPlus configuration software that could allow a local authenticated user to bypass ThinkPlus device authentication and enroll an untrusted fingerprint.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Lenovo ThinkPlus FU100

Default version status: unaffected

  • Gen 1affected

Lenovo ThinkPlus FU200

Default version status: unaffected

  • Gen 1affected

Lenovo ThinkPlus TU800

Default version status: unaffected

  • Gen 1affected

Lenovo ThinkPlus TSD303

Default version status: unaffected

  • Gen 1affected

References