Lenovo Tablet Local Authenticated Info Disclosure CVE-2025-11193
CVE-2025-11193 Published on November 3, 2025
A potential vulnerability was reported in some Lenovo Tablets that could allow a local authenticated user or application to gain access to sensitive device specific information.
Vulnerability Analysis
CVE-2025-11193 can be exploited with local system access, and requires small amount of user privileges. This vulnerability is considered to have a low attack complexity. The potential impact of an exploit of this vulnerability is considered to have a high impact on confidentiality, with no impact on integrity and availability.
Weakness Type
Unprotected Storage of Credentials
Storing a password in plaintext may result in a system compromise. Password management issues occur when a password is stored in plaintext in an application's properties or configuration file. Storing a plaintext password in a configuration file allows anyone who can read the file access to the password-protected resource.
Products Associated with CVE-2025-11193
Want to know whenever a new CVE is published for Lenovo products? stack.watch will email you.
Affected Versions
Lenovo Tab M11 TB330FU TB330XU:- Before TB330FU_ROW_OPEN_USER_V5_V_ZUI_17.0.274_ST_251011 is affected.
- Before TB330XU_ROW_OPEN_USER_V5_V_ZUI_17.0.235_ST_251011 is affected.
- Before TB330FU_ROW_OPEN_USER_V5_V_ZUI_17.0.274_ST_251011 is affected.
- Before TB330XU_ROW_OPEN_USER_V5_V_ZUI_17.0.235_ST_251011 is affected.
- Before 17.0.04.184 is affected.
- Before 17.0.10.457 is affected.
- Before 17.0.10.069 is affected.
- Before 17.0.10.065 is affected.
- Before 17.0.12.203 is affected.
- Before TB300FU_USR_S101112_250919_MP1V1111_ROW is affected.
- Before TB300XU_USR_S101103_250919_MP1V1111_ROW is affected.
- Before 17.0.104 is affected.
- Before 16.0.783 is affected.
- Before TB300FU_USR_S101112_250919_MP1V1111_ROW is affected.
- Before TB300XU_USR_S101103_250919_MP1V1111_ROW is affected.
- Before TB310FU_USR_S000912_2510022135_mp1V969_ROW is affected.
- Before TB310XU_USR_S000913_2510021921_mp1V969_ROW is affected.
- Before TB350XU_USER_S230920_2508120308_MP_ROW is affected.
- Before TB350FU_USER_S230917_2508090248_MP_ROW is affected.
- Before TB370FU_ROW_OPEN_USER_V5_V_ZUI_17.0.187_ST_250817 is affected.
- Before TB372FC_ROW_OPEN_USER_V5_V_ZUI_17.0.116_ST_250822 is affected.
- Before 17.0.30.303 is affected.
- Before 17.0.10.213 is affected.
- Before 17.0.10.213 is affected.
- Before 17.5.10.035 is affected.
- Before 17.0.10.107 is affected.
Exploit Probability
EPSS (Exploit Prediction Scoring System) scores estimate the probability that a vulnerability will be exploited in the wild within the next 30 days. The percentile shows you how this score compares to all other vulnerabilities.