Skip to content
OpenAdvisories
High · 7.8 CVE-2025-13455 EUVD-2025-206287GHSA-7mvg-mpxf-p5cf

A vulnerability was reported in ThinkPlus configuration software that could allow a local authenticated user to bypass ThinkPlus device aut…

Published Jan 14, 2026 · Updated Jan 15, 2026 · Assigned by lenovo

Description

A vulnerability was reported in ThinkPlus configuration software that could allow a local authenticated user to bypass ThinkPlus device authentication and enroll an untrusted fingerprint.

Affected products

VendorProductAffectedFixed
Lenovo ThinkPlus FU100 Gen 1 —
Lenovo ThinkPlus FU200 Gen 1 —
Lenovo ThinkPlus TU800 Gen 1 —
Lenovo ThinkPlus TSD303 Gen 1 —

References