VulnerabilityDeferred

CVE-2025-4426

The vulnerability was identified in the code developed specifically for Lenovo.

MEDIUM 6.0EPSS 0.24%

Does this matter?

Lower severity and a low EPSS score (0.24%). Track it; it rarely justifies an emergency change on its own.

Description

The vulnerability was identified in the code developed specifically for Lenovo. Please visit "Lenovo Product Security Advisories and Announcements" webpage for more information about the vulnerability. https://support.lenovo.com/us/en/product_security/home

CVSS 3.1: 6.0 MEDIUMCVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:N/I:H/A:N
EPSS: 0.24% probability · 15th percentile
CISA KEV: Not listed
Weakness: CWE-200
Source: 8338d8cb-57f7-4252-abc0-96fd13e98d21

References

https://support.lenovo.com/us/en/product_security/home
https://www.insyde.com/security-pledge/sa-2025007/

Source: NVD record, EPSS from FIRST.org, KEV from CISA. Refreshed daily.