PT-2025-32555 · Lenovo · Lenovo Performance Fhd Webcam+1

CVE-2025-4371 · Published 2025-08-08 · Updated 2025-09-08

Positive Technologies (AI Summary)

CVSS v2.0

7.2

High

Base vector

AV:L/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions: Lenovo 510 FHD Webcam versions prior to 4.8.0 Lenovo Performance FHD Webcam versions prior to 4.8.0

Description: Linux webcams can be compromised and become a persistent malware vector. The flaw allows for re-infection even after an operating system wipe, and does not require physical access to the device.

Recommendations: Update Lenovo 510 FHD Webcam to version 4.8.0. Update Lenovo Performance FHD Webcam to version 4.8.0.

Fix

Improper Verification of Cryptographic Signature

RCE

Weakness Enumeration

CWE-347

CWE-20

Related Identifiers

BDU:2025-11587

CVE-2025-4371

Affected Products

Lenovo 510 Fhd Webcam

Lenovo Performance Fhd Webcam

References · 17

• https://bdu.fstec.ru/vul/2025-11587 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2025-4371 · Security Note
• https://github.com/i-am-shodan/USBArmyKnife · Note
• https://twitter.com/mark_recovery87/status/1957934750318104844 · Twitter Post
• https://learnbridge.institute/us/en/product_security/LEN-194466?__cpo=aHR0cHM6Ly9zdXBwb3J0Lmxlbm92by5jb20 · Note
• https://twitter.com/TechNadu/status/1955949120142692591 · Twitter Post
• https://t.me/CVEtracker/30300 · Telegram Post
• https://eclypsium.com/blog/badcam-now-weaponizing-linux-webcams · Note
• https://twitter.com/grok/status/1965051390163861624 · Twitter Post
• https://reddit.com/r/TechNadu/comments/1mpxtv5/badcam_when_webcams_become_persistent_malware · Reddit Post
• https://twitter.com/CVEnew/status/1957541923566284961 · Twitter Post
• https://t.me/S_E_Reborn/5821 · Telegram Post
• https://t.me/true_secator/7316 · Telegram Post
• https://t.me/aptreports/21228 · Telegram Post
• https://t.me/aptreports/21230 · Telegram Post