CVE-2025-4371
CVE-2025-4371
7.0
HighPublished:
Last updated:
Source:psirt@lenovo.com
Deferred
Weakness (CWE)
CVSS Vector
v4.0- Attack Vector
- Physical
- Attack Complexity
- Low
- Attack Requirements
- None
- Privileges Required
- None
- User Interaction
- None
- Confidentiality (Vulnerable)
- High
- Integrity (Vulnerable)
- High
- Availability (Vulnerable)
- High
- Confidentiality (Subsequent)
- None
- Integrity (Subsequent)
- None
- Availability (Subsequent)
- None
Description
A potential vulnerability was reported in the Lenovo 510 FHD and Performance FHD web cameras that could allow an attacker with physical access to write arbitrary firmware updates to the device over a USB connection.
References
psirt@lenovo.com
https://support.lenovo.com/us/en/product_security/LEN-194466