Arbitrary File Upload Vulnerability in Lenovo Scanner Pro
CVE-2025-12048

7.7HIGH

Key Information:

Vendor

Lenovo
Status
Scanner Pro
Vendor
CVE Published:
12 November 2025

What is CVE-2025-12048?

A vulnerability in Lenovo Scanner Pro allows malicious users to upload arbitrary files, potentially enabling remote code execution or unauthorized system control. This issue was identified during a security assessment, raising critical concerns for affected users. Prompt remediation is essential to safeguard systems against potential exploitation.

Affected Version(s)

Scanner Pro Windows 0 <= 1.0.0.4

References

https://iknow.lenovo.com.cn/detail/434326

CVSS V4

Score:
7.7
Severity:
HIGH
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Adjacent Network
Attack Complexity:
Low
Attack Required:
Physical
Privileges Required:
Undefined
User Interaction:
None

Timeline

  • Vulnerability published

  • Vulnerability Reserved

JSON
.
CVE-2025-12048 : Arbitrary File Upload Vulnerability in Lenovo Scanner Pro