Lenovo Scanner Pro vulnerabilities

2 CVEs affecting Lenovo Scanner Pro, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2025-12048, published 2025-11-12.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

CVE-2025-12048, published 2025-11-12. High severity, CVSS 7.5. EPSS: 0.3% chance of exploitation in the next 30 days. An arbitrary file upload vulnerability was reported in the Lenovo Scanner Pro client during an internal security assessment that could allow remote code execution or unauthorized control of the…
CVE-2025-12047, published 2025-11-12. Medium severity, CVSS 5.3. EPSS: 0.2% chance of exploitation in the next 30 days. A vulnerability was reported in the Lenovo Scanner pro application during an internal security assessment that, under certain circumstances, could allow an attacker on the same logical network to…