CVE-2025-11193

State: Published
Severity: 6.8 Medium
Published: Nov 3, 2025
Updated: Nov 3, 2025
Reserved: Sep 30, 2025

Description

A potential vulnerability was reported in some Lenovo Tablets that could allow a local authenticated user or application to gain access to sensitive device specific information.

Scores

CVSS	Score	Vector	Source
4.0	6.8 Medium	CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N	lenovo
3.1	5.5 Medium	CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N	lenovo

Weaknesses

CWE-256 Plaintext Storage of a Password

Affected Products

Product	Versions
Tab M11 TB330FU TB330XULenovo	before TB330FU_ROW_OPEN_USER_V5_V_ZUI_17.0.274_ST_251011Affected before TB330XU_ROW_OPEN_USER_V5_V_ZUI_17.0.235_ST_251011Affected
Tab K11 TB330FU TB330FUP TB330XU TB330XUPLenovo	before TB330FU_ROW_OPEN_USER_V5_V_ZUI_17.0.274_ST_251011Affected before TB330XU_ROW_OPEN_USER_V5_V_ZUI_17.0.235_ST_251011Affected
Idea Tab Pro TB373FULenovo	before 17.0.04.184Affected
Tab WiFi 5GLenovo	before 17.0.10.457Affected
Tab K9 TB305FULenovo	before 17.0.10.069Affected
Tab K9 TB305XULenovo	before 17.0.10.065Affected
Tab Plus TB520FULenovo	before 17.0.12.203Affected
Tab M8 4th Gen 2024 TB301FU TB301XULenovo	before TB300FU_USR_S101112_250919_MP1V1111_ROWAffected before TB300XU_USR_S101103_250919_MP1V1111_ROWAffected
Tab Extreme TB570ZU TB570FULenovo	before 17.0.104Affected
Tab M10 5G TB360ZULenovo	before 16.0.783Affected
Tab M8 4th Gen TB300FU TB300XULenovo	before TB300FU_USR_S101112_250919_MP1V1111_ROWAffected before TB300XU_USR_S101103_250919_MP1V1111_ROWAffected
Tab M9 TB310FU TB310XULenovo	before TB310FU_USR_S000912_2510022135_mp1V969_ROWAffected before TB310XU_USR_S000913_2510021921_mp1V969_ROWAffected
Tab P11 2nd Gen TB350XU TB350FULenovo	before TB350XU_USER_S230920_2508120308_MP_ROWAffected before TB350FU_USER_S230917_2508090248_MP_ROWAffected
Tab P12 TB370FU TB372FULenovo	before TB370FU_ROW_OPEN_USER_V5_V_ZUI_17.0.187_ST_250817Affected before TB372FC_ROW_OPEN_USER_V5_V_ZUI_17.0.116_ST_250822Affected
Tab WIFILenovo	before 17.0.30.303Affected
Tab K11 Plus LTE TB352FU TB352XULenovo	before 17.0.10.213Affected
Tab K11 Plus WIFI TB352FULenovo	before 17.0.10.213Affected
Yoga Tab Plus TB520FULenovo	before 17.5.10.035Affected
Tab One TB305FUXULenovo	before 17.0.10.107Affected

References

https://support.lenovo.com/us/en/product_security/LEN-202383

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.