CVE-2025-12047

Medium

Description

A vulnerability was reported in the Lenovo Scanner pro application during an internal security assessment that, under certain circumstances, could allow an attacker on the same logical network to disclose sensitive user files from the application.

SeverityMedium
CVSS5.3
Exploit probability—
ProductScanner Pro
PublishedNov 12, 2025
First seenNov 12, 2025
Weakness typeCWE-295CWE-295

How to fix

Update
  • Lenovo Scanner Pro1.2.7 or later

Affected products

ProductAffected versionsFixed in
Lenovo Scanner Prov < 1.2.71.2.7

Check your version

Choose the product and enter the version you run to see whether it falls in the affected range.

In the Intelligence 360 plan

Attack Surface Management

See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.