File Disclosure Vulnerability in Lenovo Scanner Pro Application
CVE-2025-12047

6MEDIUM

Key Information:

Vendor

Lenovo
Status
Scanner Pro
Vendor
CVE Published:
12 November 2025

What is CVE-2025-12047?

A vulnerability exists in the Lenovo Scanner Pro application that may allow an attacker on the same logical network to access and disclose sensitive user files. This issue arose during an internal security assessment and highlights potential risks to user data confidentiality when the application is used in shared network environments.

Affected Version(s)

Scanner Pro Android 0 < 1.2.7

References

https://iknow.lenovo.com.cn/detail/434327

CVSS V4

Score:
6
Severity:
MEDIUM
Confidentiality:
High
Integrity:
None
Availability:
None
Attack Vector:
Adjacent Network
Attack Complexity:
High
Attack Required:
Physical
Privileges Required:
Undefined
User Interaction:
None

Timeline

  • Vulnerability published

  • Vulnerability Reserved

JSON
.
CVE-2025-12047 : File Disclosure Vulnerability in Lenovo Scanner Pro Application