PT-2025-46690 · Lenovo · Lenovo Legion Zone+3

CVE-2025-10495 · Publicado 2025-11-12 · Atualizado 2025-11-12

Positive Technologies (AI Summary)

CVSS v3.1

7.5

Alta

Vetor base

AV:A/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Lenovo PC Manager (affected versions not specified) Lenovo App Store (affected versions not specified) Lenovo Browser (affected versions not specified) Lenovo Legion Zone (affected versions not specified)

Description A potential security issue has been identified in Lenovo PC Manager, Lenovo App Store, Lenovo Browser, and Lenovo Legion Zone client applications. An attacker on the same network may be able to execute arbitrary code under specific circumstances.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Improper Certificate Validation

Enumeração de Fraquezas

CWE-295

Identificadores relacionados

CVE-2025-10495

Produtos afetados

Lenovo App Store

Lenovo Browser

Lenovo Legion Zone

Lenovo Pcmanager

Referências · 3

• https://iknow.lenovo.com.cn/detail/434328 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2025-10495 · Nota de Segurança
• https://twitter.com/CVEnew/status/1988721706471457055 · Publicação no Twitter