Lenovo ThinkPlus FU100 vulnerabilities

🔔 Create alert RSS Version checker

Published CVEs affecting Lenovo ThinkPlus FU100: 3 record(s), with affected versions and fixes.

CVE-2025-13455 High · 7.8 CWE-290 Jan 14, 2026

Authentication Bypass by Spoofing in Lenovo Thinkplus Fu100 Firmware

A vulnerability was reported in ThinkPlus configuration software that could allow a local authenticated user to bypass ThinkPlus device authentication and enroll an untrusted fingerprint.

CVE-2025-13454 Medium · 5.5 CWE-319 Jan 14, 2026

Cleartext Transmission of Sensitive Information in Lenovo Thinkplus Fu100 Firmware

A potential vulnerability was reported in ThinkPlus configuration software that could allow a local authenticated user to gain access to sensitive device information.

CVE-2025-13453 Medium · 4.6 CWE-311 Jan 14, 2026

Missing Encryption of Sensitive Data in Lenovo Thinkplus Fu100 Firmware

A potential vulnerability was reported in some ThinkPlus USB drives that could allow a user with physical access to read data stored on the drive.