CVE-2025-4371CWE-347

A potential vulnerability was reported in the Lenovo 510 FHD and Performance FHD web cameras that could allow an attacker with physical access to write…

High · published August 18, 2025

CVSS v4.0
7.0
EPSS
0%
Percentile
9.1
In the wild
Unconfirmed
What it is

A potential vulnerability was reported in the Lenovo 510 FHD and Performance FHD web cameras that could allow an attacker with physical access to write arbitrary firmware updates to the device over a USB connection.

The record
Technical detail
CVSS v4.0
7.0 · HIGH
Vector
CVSS:4.0/AV:P/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N
EPSS
0.00198 · 9.1th percentile
Weakness
CWE-347 · Improper Verification of Cryptographic Signature
Published
2025-08-18T20:04Z
EPSS history
Timeline
  • 18 AUG 20:04Z
    A potential vulnerability was reported in the Lenovo 510 FHD and Performance FHD web cameras that could allow an attacker with physical access to write…
    cvelistv5