What’s Vulnerable › Vulnerabilities
CVE-2025-4371
- Severity: medium (CVSS 6.8 v3.1)
- Exploited in the wild: not listed in CISA KEV
- EPSS: 0.2% probability of exploitation in the next 30 days
- Public exploit or detection template: none known
- Published: 2025-08-18 · updated 2026-06-17
- Weakness: CWE-347
Description
A potential vulnerability was reported in the Lenovo 510 FHD and Performance FHD web cameras that could allow an attacker with physical access to write arbitrary firmware updates to the device over a USB connection.
Affected products
- Lenovo 510 FHD Webcam: before 4.8.0 — fixed in 4.8.0
- Lenovo Performance FHD Webcam: before 4.8.0 — fixed in 4.8.0
How to fix
Upgrade to a fixed version: Lenovo 510 FHD Webcam 4.8.0; Lenovo Performance FHD Webcam 4.8.0. Check the vendor advisory for mitigations.
References
Get alerted when CVE-2025-4371 or the next vulnerability affects your stack