Read the docs
TI-2025-10255 Aliases CVE-2025-11193GHSA-2379-hjpr-9mp3

A potential vulnerability was reported in some Lenovo Tablets that could allow a local…

Priority LOW 29CWE-256Published · Updated

Key facts

Attack vector
Local
Privileges required
Low
User interaction
None
Attack complexity
Low
Attack requirements
None
Impact type
Information disclosure
Confidentiality · integrity · availability
High · None · None
Fix status
Fixed

Attack profile from CVSS 4.0 · CNA. Fix status from CNA. Impact type from CWE-256.

Summary

A potential vulnerability was reported in some Lenovo Tablets that could allow a local authenticated user or application to gain access to sensitive device specific information.

Why it matters now

Exploitation None reported CISA SSVC · not in CISA KEV
EPSS 0.00117 1st percentileScored 2026-11-07
Fix Fixed Tab M11 TB330FU TB330XU (Lenovo): TB330FU_ROW_OPEN_USER_V5_V_ZUI_17.0.274_ST_251011, TB330XU_ROW_OPEN_USER_V5_V_ZUI_17.0.235_ST_251011Tab K11 TB330FU TB330FUP TB330XU TB330XUP (Lenovo): TB330FU_ROW_OPEN_USER_V5_V_ZUI_17.0.274_ST_251011, TB330XU_ROW_OPEN_USER_V5_V_ZUI_17.0.235_ST_251011+17 more products

SSVC decision points

CISA ADP · SSVC 2.0.3

Exploitation
None
Automatable
No
Technical impact
Partial

The decision (Track, Attend, Act) also depends on your mission and well-being impact; see CISA's SSVC guide.

Affected products

VendorProductAffected versionsFixed inStatusSource
LenovoTab M11 TB330FU TB330XUbefore TB330FU_ROW_OPEN_USER_V5_V_ZUI_17.0.274_ST_251011; before TB330XU_ROW_OPEN_USER_V5_V_ZUI_17.0.235_ST_251011TB330FU_ROW_OPEN_USER_V5_V_ZUI_17.0.274_ST_251011, TB330XU_ROW_OPEN_USER_V5_V_ZUI_17.0.235_ST_251011Patch availableCNA
LenovoTab K11 TB330FU TB330FUP TB330XU TB330XUPbefore TB330FU_ROW_OPEN_USER_V5_V_ZUI_17.0.274_ST_251011; before TB330XU_ROW_OPEN_USER_V5_V_ZUI_17.0.235_ST_251011TB330FU_ROW_OPEN_USER_V5_V_ZUI_17.0.274_ST_251011, TB330XU_ROW_OPEN_USER_V5_V_ZUI_17.0.235_ST_251011Patch availableCNA
LenovoIdea Tab Pro TB373FUbefore 17.0.04.18417.0.04.184Patch availableCNA
LenovoTab WiFi 5Gbefore 17.0.10.45717.0.10.457Patch availableCNA
LenovoTab K9 TB305FUbefore 17.0.10.06917.0.10.069Patch availableCNA
LenovoTab K9 TB305XUbefore 17.0.10.06517.0.10.065Patch availableCNA
LenovoTab Plus TB520FUbefore 17.0.12.20317.0.12.203Patch availableCNA
LenovoTab M8 4th Gen 2024 TB301FU TB301XUbefore TB300FU_USR_S101112_250919_MP1V1111_ROW; before TB300XU_USR_S101103_250919_MP1V1111_ROWTB300FU_USR_S101112_250919_MP1V1111_ROW, TB300XU_USR_S101103_250919_MP1V1111_ROWPatch availableCNA
LenovoTab Extreme TB570ZU TB570FUbefore 17.0.10417.0.104Patch availableCNA
LenovoTab M10 5G TB360ZUbefore 16.0.78316.0.783Patch availableCNA
LenovoTab M8 4th Gen TB300FU TB300XUbefore TB300FU_USR_S101112_250919_MP1V1111_ROW; before TB300XU_USR_S101103_250919_MP1V1111_ROWTB300FU_USR_S101112_250919_MP1V1111_ROW, TB300XU_USR_S101103_250919_MP1V1111_ROWPatch availableCNA
LenovoTab M9 TB310FU TB310XUbefore TB310FU_USR_S000912_2510022135_mp1V969_ROW; before TB310XU_USR_S000913_2510021921_mp1V969_ROWTB310FU_USR_S000912_2510022135_mp1V969_ROW, TB310XU_USR_S000913_2510021921_mp1V969_ROWPatch availableCNA
LenovoTab P11 2nd Gen TB350XU TB350FUbefore TB350XU_USER_S230920_2508120308_MP_ROW; before TB350FU_USER_S230917_2508090248_MP_ROWTB350XU_USER_S230920_2508120308_MP_ROW, TB350FU_USER_S230917_2508090248_MP_ROWPatch availableCNA
LenovoTab P12 TB370FU TB372FUbefore TB370FU_ROW_OPEN_USER_V5_V_ZUI_17.0.187_ST_250817; before TB372FC_ROW_OPEN_USER_V5_V_ZUI_17.0.116_ST_250822TB370FU_ROW_OPEN_USER_V5_V_ZUI_17.0.187_ST_250817, TB372FC_ROW_OPEN_USER_V5_V_ZUI_17.0.116_ST_250822Patch availableCNA
LenovoTab WIFIbefore 17.0.30.30317.0.30.303Patch availableCNA
LenovoTab K11 Plus LTE TB352FU TB352XUbefore 17.0.10.21317.0.10.213Patch availableCNA
LenovoTab K11 Plus WIFI TB352FUbefore 17.0.10.21317.0.10.213Patch availableCNA
LenovoYoga Tab Plus TB520FUbefore 17.5.10.03517.5.10.035Patch availableCNA
LenovoTab One TB305FUXUbefore 17.0.10.10717.0.10.107Patch availableCNA
  • Tab M11 TB330FU TB330XU VendorLenovo Affected before TB330FU_ROW_OPEN_USER_V5_V_ZUI_17.0.274_ST_251011; before TB330XU_ROW_OPEN_USER_V5_V_ZUI_17.0.235_ST_251011 Fixed in TB330FU_ROW_OPEN_USER_V5_V_ZUI_17.0.274_ST_251011, TB330XU_ROW_OPEN_USER_V5_V_ZUI_17.0.235_ST_251011 Patch available CNA
  • Tab K11 TB330FU TB330FUP TB330XU TB330XUP VendorLenovo Affected before TB330FU_ROW_OPEN_USER_V5_V_ZUI_17.0.274_ST_251011; before TB330XU_ROW_OPEN_USER_V5_V_ZUI_17.0.235_ST_251011 Fixed in TB330FU_ROW_OPEN_USER_V5_V_ZUI_17.0.274_ST_251011, TB330XU_ROW_OPEN_USER_V5_V_ZUI_17.0.235_ST_251011 Patch available CNA
  • Idea Tab Pro TB373FU VendorLenovo Affected before 17.0.04.184 Fixed in 17.0.04.184 Patch available CNA
  • Tab WiFi 5G VendorLenovo Affected before 17.0.10.457 Fixed in 17.0.10.457 Patch available CNA
  • Tab K9 TB305FU VendorLenovo Affected before 17.0.10.069 Fixed in 17.0.10.069 Patch available CNA
  • Tab K9 TB305XU VendorLenovo Affected before 17.0.10.065 Fixed in 17.0.10.065 Patch available CNA
  • Tab Plus TB520FU VendorLenovo Affected before 17.0.12.203 Fixed in 17.0.12.203 Patch available CNA
  • Tab M8 4th Gen 2024 TB301FU TB301XU VendorLenovo Affected before TB300FU_USR_S101112_250919_MP1V1111_ROW; before TB300XU_USR_S101103_250919_MP1V1111_ROW Fixed in TB300FU_USR_S101112_250919_MP1V1111_ROW, TB300XU_USR_S101103_250919_MP1V1111_ROW Patch available CNA
  • Tab Extreme TB570ZU TB570FU VendorLenovo Affected before 17.0.104 Fixed in 17.0.104 Patch available CNA
  • Tab M10 5G TB360ZU VendorLenovo Affected before 16.0.783 Fixed in 16.0.783 Patch available CNA
  • Tab M8 4th Gen TB300FU TB300XU VendorLenovo Affected before TB300FU_USR_S101112_250919_MP1V1111_ROW; before TB300XU_USR_S101103_250919_MP1V1111_ROW Fixed in TB300FU_USR_S101112_250919_MP1V1111_ROW, TB300XU_USR_S101103_250919_MP1V1111_ROW Patch available CNA
  • Tab M9 TB310FU TB310XU VendorLenovo Affected before TB310FU_USR_S000912_2510022135_mp1V969_ROW; before TB310XU_USR_S000913_2510021921_mp1V969_ROW Fixed in TB310FU_USR_S000912_2510022135_mp1V969_ROW, TB310XU_USR_S000913_2510021921_mp1V969_ROW Patch available CNA
  • Tab P11 2nd Gen TB350XU TB350FU VendorLenovo Affected before TB350XU_USER_S230920_2508120308_MP_ROW; before TB350FU_USER_S230917_2508090248_MP_ROW Fixed in TB350XU_USER_S230920_2508120308_MP_ROW, TB350FU_USER_S230917_2508090248_MP_ROW Patch available CNA
  • Tab P12 TB370FU TB372FU VendorLenovo Affected before TB370FU_ROW_OPEN_USER_V5_V_ZUI_17.0.187_ST_250817; before TB372FC_ROW_OPEN_USER_V5_V_ZUI_17.0.116_ST_250822 Fixed in TB370FU_ROW_OPEN_USER_V5_V_ZUI_17.0.187_ST_250817, TB372FC_ROW_OPEN_USER_V5_V_ZUI_17.0.116_ST_250822 Patch available CNA
  • Tab WIFI VendorLenovo Affected before 17.0.30.303 Fixed in 17.0.30.303 Patch available CNA
  • Tab K11 Plus LTE TB352FU TB352XU VendorLenovo Affected before 17.0.10.213 Fixed in 17.0.10.213 Patch available CNA
  • Tab K11 Plus WIFI TB352FU VendorLenovo Affected before 17.0.10.213 Fixed in 17.0.10.213 Patch available CNA
  • Yoga Tab Plus TB520FU VendorLenovo Affected before 17.5.10.035 Fixed in 17.5.10.035 Patch available CNA
  • Tab One TB305FUXU VendorLenovo Affected before 17.0.10.107 Fixed in 17.0.10.107 Patch available CNA

Remediation

  • Fix · CNA Tab M11 TB330FU TB330XU (Lenovo) Fixed in TB330FU_ROW_OPEN_USER_V5_V_ZUI_17.0.274_ST_251011, TB330XU_ROW_OPEN_USER_V5_V_ZUI_17.0.235_ST_251011
  • Fix · CNA Tab K11 TB330FU TB330FUP TB330XU TB330XUP (Lenovo) Fixed in TB330FU_ROW_OPEN_USER_V5_V_ZUI_17.0.274_ST_251011, TB330XU_ROW_OPEN_USER_V5_V_ZUI_17.0.235_ST_251011
  • Fix · CNA Idea Tab Pro TB373FU (Lenovo) Fixed in 17.0.04.184
  • Fix · CNA Tab WiFi 5G (Lenovo) Fixed in 17.0.10.457
  • Fix · CNA Tab K9 TB305FU (Lenovo) Fixed in 17.0.10.069
  • Fix · CNA Tab K9 TB305XU (Lenovo) Fixed in 17.0.10.065
  • Fix · CNA Tab Plus TB520FU (Lenovo) Fixed in 17.0.12.203
  • Fix · CNA Tab M8 4th Gen 2024 TB301FU TB301XU (Lenovo) Fixed in TB300FU_USR_S101112_250919_MP1V1111_ROW, TB300XU_USR_S101103_250919_MP1V1111_ROW
  • Fix · CNA Tab Extreme TB570ZU TB570FU (Lenovo) Fixed in 17.0.104
  • Fix · CNA Tab M10 5G TB360ZU (Lenovo) Fixed in 16.0.783
  • Fix · CNA Tab M8 4th Gen TB300FU TB300XU (Lenovo) Fixed in TB300FU_USR_S101112_250919_MP1V1111_ROW, TB300XU_USR_S101103_250919_MP1V1111_ROW
  • Fix · CNA Tab M9 TB310FU TB310XU (Lenovo) Fixed in TB310FU_USR_S000912_2510022135_mp1V969_ROW, TB310XU_USR_S000913_2510021921_mp1V969_ROW
  • Fix · CNA Tab P11 2nd Gen TB350XU TB350FU (Lenovo) Fixed in TB350XU_USER_S230920_2508120308_MP_ROW, TB350FU_USER_S230917_2508090248_MP_ROW
  • Fix · CNA Tab P12 TB370FU TB372FU (Lenovo) Fixed in TB370FU_ROW_OPEN_USER_V5_V_ZUI_17.0.187_ST_250817, TB372FC_ROW_OPEN_USER_V5_V_ZUI_17.0.116_ST_250822
  • Fix · CNA Tab WIFI (Lenovo) Fixed in 17.0.30.303
  • Fix · CNA Tab K11 Plus LTE TB352FU TB352XU (Lenovo) Fixed in 17.0.10.213
  • Fix · CNA Tab K11 Plus WIFI TB352FU (Lenovo) Fixed in 17.0.10.213
  • Fix · CNA Yoga Tab Plus TB520FU (Lenovo) Fixed in 17.5.10.035
  • Fix · CNA Tab One TB305FUXU (Lenovo) Fixed in 17.0.10.107

Timeline

  1. 2026-10-02 Threatist record created from CVE-2025-11193
  2. 2026-10-03 Alias added: GHSA-2379-hjpr-9mp3

References

Other 1

  • TI-2017-03639 Improper handling of exceptional conditions in Apache Struts KEVCVSS 3.1CRITICAL 9.8
  • TI-2024-07516 Insecure Platform Key (PK) used in UEFI system firmware signature CVSS 3.1MEDIUM 6.4
  • TI-2017-13070 OpenSLP releases in the 1.0.2 and 1.1.0 code streams have a heap-related memory… CVSS 3.0CRITICAL 9.8
  • TI-2017-02875 OS command injection in Lenovo Service Framework application CVSS 3.0CRITICAL 9.8
  • TI-2013-01192 Untrusted search path vulnerability in Lenovo Thinkpad Bluetooth with Enhanced Data Rate… CVSS 2.0HIGH 9.3
  • TI-2026-53163 Hard-coded credentials in Lenovo Health Application CVSS 4.0CRITICAL 9.3
See all 534 →

Sources

This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences