Code Vulnerability in Lenovo Products Affects User Security
CVE-2025-4424

6MEDIUM

Key Information:

Vendor

Insyde Software

Status
Insydeh2o
Vendor
CVE Published:
30 July 2025

What is CVE-2025-4424?

A vulnerability has been discovered in the code for Lenovo products, posing a potential risk to user security. It is important for users to stay informed and take necessary actions as outlined in Lenovo's Product Security Advisories. For comprehensive details about the security advisory and the affected systems, please refer to the Lenovo Product Security Advisories and Announcements webpage.

Affected Version(s)

InsydeH2O Feature developed for Lenovo

References

https://www.insyde.com/security-pledge/sa-2025007/
https://support.lenovo.com/us/en/product_security/home

CVSS V3.1

Score:
6
Severity:
MEDIUM
Confidentiality:
None
Integrity:
High
Availability:
None
Attack Vector:
Local
Attack Complexity:
Low
Privileges Required:
High
User Interaction:
None
Scope:
Changed

Timeline

  • Vulnerability published

  • Vulnerability Reserved

Credit

BINARLY REsearch team
.
CVE-2025-4424 : Code Vulnerability in Lenovo Products Affects User Security