Skip to content
OpenAdvisories
Medium · 5.5 CVE-2025-13454 EUVD-2025-206288GHSA-8v57-mx5c-25h7

A potential vulnerability was reported in ThinkPlus configuration software that could allow a local authenticated user to gain access to se…

Published Jan 14, 2026 · Updated Feb 25, 2026 · Assigned by lenovo

Description

A potential vulnerability was reported in ThinkPlus configuration software that could allow a local authenticated user to gain access to sensitive device information.

Affected products

VendorProductAffectedFixed
Lenovo ThinkPlus FU100 Gen 1 —
Lenovo ThinkPlus FU200 Gen 1 —
Lenovo ThinkPlus TU800 Gen 1 —
Lenovo ThinkPlus TSD303 Gen 1 —

References