Vulnerability · Published Nov 3, 2025 · Assigned by lenovo

CVE-2025-11193

Medium 5.5

In plain English

A medium-severity security flaw in Idea Tab Pro TB373FU from Lenovo. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 0.1% (higher than 2% of all known vulnerabilities).

Severity (CVSS 3.1)5.5Medium
Exploit odds (30 days)0.1%top 98.3% of all CVEs
Exploited in the wildNo reportsCISA SSVC: none
Attack toolingNoneno public tooling known

Official description

A potential vulnerability was reported in some Lenovo Tablets that could allow a local authenticated user or application to gain access to sensitive device specific information.

Affected products (as reported)

VendorProductVersions
Lenovo Tab M11 TB330FU TB330XU 0 – before TB330FU_ROW_OPEN_USER_V5_V_ZUI_17.0.274_ST_2510110 – before TB330XU_ROW_OPEN_USER_V5_V_ZUI_17.0.235_ST_251011
Lenovo Tab K11 TB330FU TB330FUP TB330XU TB330XUP 0 – before TB330FU_ROW_OPEN_USER_V5_V_ZUI_17.0.274_ST_2510110 – before TB330XU_ROW_OPEN_USER_V5_V_ZUI_17.0.235_ST_251011
Lenovo Idea Tab Pro TB373FU 0 – before 17.0.04.184
Lenovo Tab WiFi 5G 0 – before 17.0.10.457
Lenovo Tab K9 TB305FU 0 – before 17.0.10.069
Lenovo Tab K9 TB305XU 0 – before 17.0.10.065
Lenovo Tab Plus TB520FU 0 – before 17.0.12.203
Lenovo Tab M8 4th Gen 2024 TB301FU TB301XU 0 – before TB300FU_USR_S101112_250919_MP1V1111_ROW0 – before TB300XU_USR_S101103_250919_MP1V1111_ROW
Lenovo Tab Extreme TB570ZU TB570FU 0 – before 17.0.104
Lenovo Tab M10 5G TB360ZU 0 – before 16.0.783
Lenovo Tab M8 4th Gen TB300FU TB300XU 0 – before TB300FU_USR_S101112_250919_MP1V1111_ROW0 – before TB300XU_USR_S101103_250919_MP1V1111_ROW
Lenovo Tab M9 TB310FU TB310XU 0 – before TB310FU_USR_S000912_2510022135_mp1V969_ROW0 – before TB310XU_USR_S000913_2510021921_mp1V969_ROW
Lenovo Tab P11 2nd Gen TB350XU TB350FU 0 – before TB350XU_USER_S230920_2508120308_MP_ROW0 – before TB350FU_USER_S230917_2508090248_MP_ROW
Lenovo Tab P12 TB370FU TB372FU 0 – before TB370FU_ROW_OPEN_USER_V5_V_ZUI_17.0.187_ST_2508170 – before TB372FC_ROW_OPEN_USER_V5_V_ZUI_17.0.116_ST_250822
Lenovo Tab WIFI 0 – before 17.0.30.303
Lenovo Tab K11 Plus LTE TB352FU TB352XU 0 – before 17.0.10.213
Lenovo Tab K11 Plus WIFI TB352FU 0 – before 17.0.10.213
Lenovo Yoga Tab Plus TB520FU 0 – before 17.5.10.035
Lenovo Tab One TB305FUXU 0 – before 17.0.10.107

Weakness: CWE-256 · Vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

References