CVE-2025-12047 MEDIUM

CVE-2025-12047

Vendor Lenovo
Product Scanner Pro
Weakness CWE-295
Published November 12, 2025
Last update November 12, 2025

CVSS base score

6.0/10
Attack vector Adjacent
Attack complexity High
Privileges required None
User interaction None
Confidentiality
Integrity

CVSS vector

CVSS:4.0/AV:A/AC:H/AT:P/PR:N/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N

What the vulnerability does

01Description

A vulnerability was reported in the Lenovo Scanner pro application during an internal security assessment that, under certain circumstances, could allow an attacker on the same logical network to disclose sensitive user files from the application.

Key dates

02Disclosure timeline

November 12, 2025 CVE published
November 12, 2025 Record updated