CVE-2025-12047CWE-295

CVE-2025-12047

Medium · published November 13, 2025

CVSS v3.1
5.3
EPSS
0%
Percentile
5.6
In the wild
Unconfirmed
What it is

A vulnerability was reported in the Lenovo Scanner pro application during an internal security assessment that, under certain circumstances, could allow an attacker on the same logical network to disclose sensitive user files from the application.

The record
Technical detail
CVSS v3.1
5.3 · MEDIUM
Vector
CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N
CVSS v4.0
Not supplied
EPSS
0.00167 · 5.6th percentile
Weakness
CWE-295 · Improper Certificate Validation
Published
2025-11-13T01:15Z
References (1)
https://iknow.lenovo.com.cn/detail/434327 · [email protected]
EPSS history
Timeline
  • 12 NOV 19:18Z
    A vulnerability was reported in the Lenovo Scanner pro application during an internal security assessment that, under certain circumstances, could allow an…
    cvelistv5