CVE-2025-13453

A potential vulnerability was reported in some ThinkPlus USB drives that could allow a user with physical access to read data stored on the drive.

Scoring

Severity

MEDIUM

CVSS base score

5.1

CVSS vector

CVSS:4.0/AV:P/AC:L/AT:N/PR:N/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N

EPSS probability

0.13%

CWE

CWE-311

Published

2026-01-14

Last modified

2026-03-13

Affected products

• Lenovo ThinkPlus FU100
• Lenovo ThinkPlus FU200
• Lenovo ThinkPlus TU800
• Lenovo ThinkPlus TSD303

Weakness type

• CWE-311

Related vulnerabilities

• CVE-2026-81688 — openssl_encrypt before 1.4.9 Plaintext Confirmation Oracle via SHA-256
• CVE-2026-81681 — openssl_encrypt before 1.4.9 False Encryption via Cleartext Storage
• CVE-2026-77812 — Cleartext Exposure of DJI Drone Wi-Fi Credentials via BLE
• CVE-2026-19891 — TRENDnet TEW-WLC100 IKE Phase 1 Aggressive Mode racoon.conf missing encryption
• CVE-2026-20157 — Cisco RoomOS Security Hardening Release - Missing Encryption Vulnerabilities
• CVE-2026-54784 — CoreWCF: SPNEGO SecurityContextToken proof key wrapped without confidentiality
• CVE-2026-55568 — Guzzle: Silent HTTPS-Proxy Downgrade to Cleartext
• CVE-2026-34486 — Apache Tomcat: Fix for CVE-2026-29146 allowed bypass of EncryptInterceptor

Markdown version · Browse all CVEs