CVE-2025-13455
Get alerts for future matching vulnerabilitiesLog in to subscribe
I. Basic Information for CVE-2025-13455
Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗ Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Source: NVD (National Vulnerability Database)
Vulnerability Description
A vulnerability was reported in ThinkPlus configuration software that could allow a local authenticated user to bypass ThinkPlus device authentication and enroll an untrusted fingerprint.
Source: NVD (National Vulnerability Database)
CVSS Information
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Source: NVD (National Vulnerability Database)
Vulnerability Type
使用欺骗进行的认证绕过
Source: NVD (National Vulnerability Database)
Vulnerability Title
Lenovo多款产品 安全漏洞
Source: CNNVD (China National Vulnerability Database)
Vulnerability Description
Lenovo ThinkPlus FU100等都是中国联想（Lenovo）公司的产品。Lenovo ThinkPlus FU100是一款指纹优盘。Lenovo ThinkPlus FU200是一款指纹优盘。Lenovo ThinkPlus TU800是一款优盘。 Lenovo多款产品存在安全漏洞，该漏洞源于本地经过身份验证的用户可能绕过ThinkPlus设备身份验证并注册不可信的指纹。以下产品受到影响：Lenovo ThinkPlus FU100、Lenovo ThinkPlus FU200、Lenovo
Source: CNNVD (China National Vulnerability Database)
CVSS Information
N/A
Source: CNNVD (China National Vulnerability Database)
Vulnerability Type
N/A
Source: CNNVD (China National Vulnerability Database)
Affected Products
| Vendor | Product | Affected Versions | CPE | Subscribe |
|---|---|---|---|---|
| Lenovo | ThinkPlus FU100 | Gen 1 | - | |
| Lenovo | ThinkPlus FU200 | Gen 1 | - | |
| Lenovo | ThinkPlus TU800 | Gen 1 | - | |
| Lenovo | ThinkPlus TSD303 | Gen 1 | - |
II. Public POCs for CVE-2025-13455
| # | POC Description | Source Link | Shenlong Link |
|---|
AI-Generated POCPremium
No public POC found.
Login to generate AI POCIII. Intelligence Information for CVE-2025-13455
请登录查看更多情报信息。
Same Patch Batch · Lenovo · 2026-01-14 · 6 CVEs total
| CVE-2026-0421 | 6.5 MEDIUM | Lenovo ThinkPad BIOS 安全漏洞 |
| CVE-2025-13454 | 5.5 MEDIUM | Lenovo多款产品 安全漏洞 |
| CVE-2025-13154 | 5.5 MEDIUM | Lenovo Vantage 安全漏洞 |
| CVE-2025-13453 | 4.6 MEDIUM | Lenovo ThinkPlus 安全漏洞 |
| CVE-2025-14058 | 3.2 LOW | Lenovo Tablets 安全漏洞 |
IV. Related Vulnerabilities
Same weakness: CWE-290
- CVE-2021-47923
OpenCart 3.0.3.8 Session Fixation via OCSESSID Cookie - CVE-2026-42354
Sentry: Improper authentication on SAML SSO process allows u - CVE-2026-44118
OpenClaw < 2026.4.22 - Owner Context Spoofing via Bearer Tok - CVE-2026-39858
Traefik: Forwarded alias spoofing top pre-auth decision bypa - CVE-2018-25318
Tenda FH303/A300 V5.07.68_EN Cookie Session Weakness DNS Cha
V. Comments for CVE-2025-13455
Anonymous User
2026-01-15 06:08:03Zaproxy alias impedit expedita quisquam pariatur exercitationem. Nemo rerum eveniet dolores rem quia dignissimos.