← Database

CVE-2025-13455

HIGH CVSS: 7.8 Published: 2026-01-14 Modified: 2026-06-17

Description

A vulnerability was reported in ThinkPlus configuration software that could allow a local authenticated user to bypass ThinkPlus device authentication and enroll an untrusted fingerprint.

Affected Platforms

Lenovo Thinkplus Tu800 FirmwareLenovo Thinkplus Fu100Lenovo Thinkplus Tu800Lenovo Thinkplus Tsd303Lenovo Thinkplus Fu200 FirmwareLenovo Thinkplus Fu100 FirmwareLenovo Thinkplus Tsd303 FirmwareLenovo Thinkplus Fu200

Weakness Type

CWE-290

References