{"dataType":"CVE_RECORD","dataVersion":"5.1","cveMetadata":{"cveId":"CVE-2025-0886","assignerOrgId":"da227ddf-6e25-4b41-b023-0f976dcaca4b","state":"PUBLISHED","assignerShortName":"lenovo","dateReserved":"2025-01-30T16:35:23.042Z","datePublished":"2025-07-17T19:16:16.273Z","dateUpdated":"2025-07-17T20:09:10.929Z"},"containers":{"cna":{"cpeApplicability":[{"nodes":[{"operator":"OR","cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:lenovo:elliptic_virtual_lock_sensor_service_for_p16s_gen_2_type_21hk_21hl_laptop_thinkpad:*:*:*:*:*:*:*:*","versionEndExcluding":"1000.100.108.858"},{"vulnerable":true,"criteria":"cpe:2.3:a:lenovo:elliptic_virtual_lock_sensor_for_x13_yoga_gen_4_type_21f2_21f3_laptop_thinkpad:*:*:*:*:*:*:*:*","versionEndExcluding":"1000.100.108.761"},{"vulnerable":true,"criteria":"cpe:2.3:a:lenovo:elliptic_virtual_lock_sensor_service_for_t14_gen_3_type_21ah_21aj_laptop_thinkpad:*:*:*:*:*:*:*:*","versionEndExcluding":"3.2.61209.5"},{"vulnerable":true,"criteria":"cpe:2.3:a:lenovo:elliptic_virtual_lock_sensor_service_for_t14_gen_3_type_21cf_21cg_laptop_thinkpad:*:*:*:*:*:*:*:*","versionEndExcluding":"3.2.61209.5"},{"vulnerable":true,"criteria":"cpe:2.3:a:lenovo:elliptic_human_presence_detection_device_driver_for_p16_gen_2_type_21fa_21fb_laptop_thinkpad:*:*:*:*:*:*:*:*","versionEndExcluding":"1000.100.108.774"},{"vulnerable":true,"criteria":"cpe:2.3:a:lenovo:elliptic_virtual_lock_sensor_service_for_p14s_gen_4_type_21k5_21k6_laptop_thinkpad:*:*:*:*:*:*:*:*","versionEndExcluding":"1000.100.108.1893"},{"vulnerable":true,"criteria":"cpe:2.3:a:lenovo:elliptic_human_presence_detection_device_driver_for_t14_gen_5_type_21mc_21md_laptops_thinkpad:*:*:*:*:*:*:*:*","versionEndExcluding":"1000.100.108.6136"},{"vulnerable":true,"criteria":"cpe:2.3:a:lenovo:elliptic_human_presence_detection_device_driver_for_t14s_gen_4_type_21f8_21f9_laptop_thinkpad:*:*:*:*:*:*:*:*","versionEndExcluding":"1000.100.108.1893"},{"vulnerable":true,"criteria":"cpe:2.3:a:lenovo:elliptic_human_presence_detection_device_driver_for_x13_gen_4_type_21j3_21j4_laptop_thinkpad:*:*:*:*:*:*:*:*","versionEndExcluding":"1000.100.108.2234"},{"vulnerable":true,"criteria":"cpe:2.3:a:lenovo:elliptic_human_presence_detection_device_driver_for_p16v_gen_1_type_21fe_21ff_laptop_thinkpad:*:*:*:*:*:*:*:*","versionEndExcluding":"1000.100.108.2235"},{"vulnerable":true,"criteria":"cpe:2.3:a:lenovo:elliptic_virtual_lock_sensor_service_for_p1_gen_6_type_21fv_21fw_laptop_thinkpad:*:*:*:*:*:*:*:*","versionEndExcluding":"1000.100.108.548"},{"vulnerable":true,"criteria":"cpe:2.3:a:lenovo:elliptic_human_presence_detection_device_driver_for_t14s_gen_5_type_21ls_21lt_laptop_thinkpad:*:*:*:*:*:*:*:*","versionEndExcluding":"1000.100.108.801"},{"vulnerable":true,"criteria":"cpe:2.3:a:elliptic_human_presence_detection_device_driver_for_lenovo:p14s_gen_5_type_21g2_21g3_laptops_thinkpad:*:*:*:*:*:*:*:*","versionEndExcluding":"1000.100.108.801"},{"vulnerable":true,"criteria":"cpe:2.3:a:lenovo:elliptic_human_presence_detection_device_driver_for_p16v_gen_2_type_21kx_21ky_laptops_thinkpad:*:*:*:*:*:*:*:*","versionEndExcluding":"1000.100.108.801"},{"vulnerable":true,"criteria":"cpe:2.3:a:lenovo:elliptic_human_presence_detection_device_driver_for_p1_gen_7_type_21kv_21kw_laptop_thinkpad:*:*:*:*:*:*:*:*","versionEndExcluding":"1000.100.108.801"},{"vulnerable":true,"criteria":"cpe:2.3:a:lenovo:elliptic_virtual_lock_sensor_service_for_x1_2_in_1_gen_9_type_21ke_21kf_laptop_thinkpad:*:*:*:*:*:*:*:*","versionEndExcluding":"1000.100.108.801"},{"vulnerable":true,"criteria":"cpe:2.3:a:lenovo:elliptic_human_presence_detection_device_driver_for_t16_gen_2_type_21k7_21k8_laptop_thinkpad:*:*:*:*:*:*:*:*","versionEndExcluding":"1000.100.106.2391"},{"vulnerable":true,"criteria":"cpe:2.3:a:lenovo:elliptic_human_presence_detection_device_driver_for_p16v_gen_1_type_21fc_21fd_laptop_thinkpad:*:*:*:*:*:*:*:*","versionEndExcluding":"1000.100.108.900"},{"vulnerable":true,"criteria":"cpe:2.3:a:lenovo:elliptic_human_presence_detection_driver_for_t14s_gen_6_type_21m1_21m2_laptops_thinkpad:*:*:*:*:*:*:*:*","versionEndExcluding":"1000.100.109.82"}]}]}],"affected":[{"defaultStatus":"unaffected","product":"Elliptic Virtual Lock Sensor Service For ThinkPad P1 Gen 6 (Type 21FV, 21FW)","vendor":"Lenovo","versions":[{"lessThan":"1000.100.108.548","status":"affected","version":"0","versionType":"custom"}]},{"defaultStatus":"unaffected","product":"Elliptic Human Presence Detection Driver for ThinkPad P1 Gen 7 (Type 21KV, 21KW)","vendor":"Lenovo","versions":[{"lessThan":"1000.100.108.801","status":"affected","version":"0","versionType":"custom"}]},{"defaultStatus":"unaffected","product":"Elliptic Virtual Lock Sensor Service for P14s Gen 4 (Type 21HF, 21HG)","vendor":"Lenovo","versions":[{"lessThan":"1000.100.108.858","status":"affected","version":"0","versionType":"custom"}]},{"defaultStatus":"unaffected","product":"Elliptic Human Presence Detection Device Driver for ThinkPad P14s Gen 4 (Type 21K5, 21K6)","vendor":"Lenovo","versions":[{"lessThan":"1000.100.108.1893","status":"affected","version":"0","versionType":"custom"}]},{"defaultStatus":"unaffected","product":"Elliptic Human Presence Detection Driver for ThinkPad P14s Gen 5 (Type 21G2, 21G3)","vendor":"Lenovo","versions":[{"lessThan":"1000.100.108.801","status":"affected","version":"0","versionType":"custom"}]},{"defaultStatus":"unaffected","product":"Elliptic Human Presence Detection Device Driver for ThinkPad P14s Gen 5 (Type 21ME, 21MF)","vendor":"Lenovo","versions":[{"lessThan":"1000.100.108.6136","status":"affected","version":"0","versionType":"custom"}]},{"defaultStatus":"unaffected","product":"Elliptic Human Presence detection Device Driver for ThinkPad P16 Gen 2 (Type 21FA, 21FB)","vendor":"Lenovo","versions":[{"lessThan":"1000.100.108.774","status":"affected","version":"0","versionType":"custom"}]},{"defaultStatus":"unaffected","product":"Elliptic Virtual Lock Sensor Service for P16s Gen 2 (Type 21HK, 21HL)","vendor":"Lenovo","versions":[{"lessThan":"1000.100.108.858","status":"affected","version":"0","versionType":"custom"}]},{"defaultStatus":"unaffected","product":"Elliptic Human Presence Detection Device Driver for ThinkPad P16s Gen 2 (Type 21K9, 21KA)","vendor":"Lenovo","versions":[{"lessThan":"1000.100.106.2391","status":"affected","version":"0","versionType":"custom"}]},{"defaultStatus":"unaffected","product":"lliptic Human Presence Detection Driver for P16s Gen 3 (Type 21KS, 21KT)","vendor":"Lenovo","versions":[{"lessThan":"1000.100.108.801","status":"affected","version":"0","versionType":"custom"}]},{"defaultStatus":"unaffected","product":"Elliptic Human Presence Detection Device Driver for ThinkPad P16v Gen 1 (Type 21FC, 21FD)","vendor":"Lenovo","versions":[{"lessThan":"1000.100.108.900","status":"affected","version":"0","versionType":"custom"}]},{"defaultStatus":"unaffected","product":"Elliptic Human Presence Detection Driver for ThinkPad P16v Gen 1 (Type 21FE, 21FF)","vendor":"Lenovo","versions":[{"lessThan":"1000.100.108.2235","status":"affected","version":"0","versionType":"custom"}]},{"defaultStatus":"unaffected","product":"Elliptic Human Presence Detection Device Driver for ThinkPad P16v Gen 2 (Type 21KX, 21KY)","vendor":"Lenovo","versions":[{"lessThan":"1000.100.108.801","status":"affected","version":"0","versionType":"custom"}]},{"defaultStatus":"unaffected","product":"Elliptic Virtual Lock Sensor Service for ThinkPad T14 Gen 3 (Type 21AH, 21AJ)","vendor":"Lenovo","versions":[{"lessThan":"3.2.61209.5","status":"affected","version":"0","versionType":"custom"}]},{"defaultStatus":"unaffected","product":"Elliptic Virtual Lock Sensor Service for ThinkPad T14 Gen 3 (Type 21CF, 21CG))","vendor":"Lenovo","versions":[{"lessThan":"3.2.61209.5","status":"affected","version":"0","versionType":"custom"}]},{"defaultStatus":"unaffected","product":"Elliptic Virtual Lock Sensor Service for T14 Gen 4 (Type 21HD, 21HE)","vendor":"Lenovo","versions":[{"lessThan":"1000.100.108.858","status":"affected","version":"0","versionType":"custom"}]},{"defaultStatus":"unaffected","product":"Elliptic Human Presence Detection Device Driver for T14 Gen 4 (Type 21K3, 21K4)","vendor":"Lenovo","versions":[{"lessThan":"1000.100.108.1893","status":"affected","version":"0","versionType":"custom"}]},{"defaultStatus":"unaffected","product":"lliptic Human Presence Detection Device Driver for T14 Gen 5 (Type 21MC, 21MD)","vendor":"Lenovo","versions":[{"lessThan":"1000.100.108.6136","status":"affected","version":"0","versionType":"custom"}]},{"defaultStatus":"unaffected","product":"Elliptic Human Presence Detection Device Driver for T14 Gen 5 (Type 21ML, 21MM)","vendor":"Lenovo","versions":[{"lessThan":"1000.100.108.801","status":"affected","version":"0","versionType":"custom"}]},{"defaultStatus":"unaffected","product":"Elliptic Virtual Lock Sensor Service for T14s Gen 4 (Type 21F6, 21F7)","vendor":"Lenovo","versions":[{"lessThan":"1000.100.108.858","status":"affected","version":"0","versionType":"custom"}]},{"defaultStatus":"unaffected","product":"Elliptic Human Presence Detection Device Driver for ThinkPad T14s Gen 4 (Type 21F8, 21F9)","vendor":"Lenovo","versions":[{"lessThan":"1000.100.108.1893","status":"affected","version":"0","versionType":"custom"}]},{"defaultStatus":"unaffected","product":"Elliptic Human Presence Detection Device Driver for T14s Gen 5 (Type 21LS, 21LT)","vendor":"Lenovo","versions":[{"lessThan":"1000.100.108.801","status":"affected","version":"0","versionType":"custom"}]},{"defaultStatus":"unaffected","product":"Elliptic Human Presence Detection driver for ThinkPad T14s Gen 6 (Type 21M1, 21M2)","vendor":"Lenovo","versions":[{"lessThan":"1000.100.109.82","status":"affected","version":"0","versionType":"custom"}]},{"defaultStatus":"unaffected","product":"Elliptic Virtual Lock Sensor Service for T16 Gen 2 (Type 21HH, 21HJ)","vendor":"Lenovo","versions":[{"lessThan":"1000.100.108.858","status":"affected","version":"0","versionType":"custom"}]},{"defaultStatus":"unaffected","product":"Elliptic Human Presence Detection Device Driver for T16 Gen 2 (Type 21K7 21K8)","vendor":"Lenovo","versions":[{"lessThan":"1000.100.106.2391","status":"affected","version":"0","versionType":"custom"}]},{"defaultStatus":"unaffected","product":"Elliptic Human Presence Detection Device Driver for T16 Gen 3 (Type 21MN, 21MQ)","vendor":"Lenovo","versions":[{"lessThan":"1000.100.108.801","status":"affected","version":"0","versionType":"custom"}]},{"defaultStatus":"unaffected","product":"Elliptic Virtual Lock Sensor Service for X1 2-in-1 Gen 9 (Type 21KE, 21KF)","vendor":"Lenovo","versions":[{"lessThan":"1000.100.108.801","status":"affected","version":"0","versionType":"custom"}]},{"defaultStatus":"unaffected","product":"Elliptic Virtual Lock Sensor Service for ThinkPad X1 Carbon 12th Gen (Type 21KC, 21KD)","vendor":"Lenovo","versions":[{"lessThan":"1000.100.108.801","status":"affected","version":"0","versionType":"custom"}]},{"defaultStatus":"unaffected","product":"Elliptic Human Presence Detection Device Driver for X13 2-in-1 Gen 5 (Type 21LW, 21LX)","vendor":"Lenovo","versions":[{"lessThan":"1000.100.108.801","status":"affected","version":"0","versionType":"custom"}]},{"defaultStatus":"unaffected","product":"Elliptic Virtual Lock Sensor for ThinkPad X13 Gen 4 (Type 21EX, 21EY)","vendor":"Lenovo","versions":[{"lessThan":"1000.100.108.761","status":"affected","version":"0","versionType":"custom"}]},{"defaultStatus":"unaffected","product":"Elliptic Human Presence Detection Driver for ThinkPad X13 Gen 4 (Type 21J3, 21J4)","vendor":"Lenovo","versions":[{"lessThan":"1000.100.108.2234","status":"affected","version":"0","versionType":"custom"}]},{"defaultStatus":"unaffected","product":"Elliptic Human Presence Detection Device Driver for X13 Gen 5 (Type 21LU, 21LV)","vendor":"Lenovo","versions":[{"lessThan":"1000.100.108.801","status":"affected","version":"0","versionType":"custom"}]},{"defaultStatus":"unaffected","product":"Elliptic Virtual Lock Sensor for X13 Yoga Gen 4 (Type 21F2, 21F3)","vendor":"Lenovo","versions":[{"lessThan":"1000.100.108.761","status":"affected","version":"0","versionType":"custom"}]}],"credits":[{"lang":"en","type":"finder","value":"Lenovo thanks Alexander Staalgaard, JN Data Red Team, for reporting this issue."}],"descriptions":[{"lang":"en","supportingMedia":[{"base64":false,"type":"text/html","value":"<span style=\"background-color: rgb(255, 255, 255);\">An incorrect permissions vulnerability was reported in Elliptic Labs Virtual Lock Sensor that could allow a local, authenticated user to escalate privileges. </span>"}],"value":"An incorrect permissions vulnerability was reported in Elliptic Labs Virtual Lock Sensor that could allow a local, authenticated user to escalate privileges."}],"metrics":[{"cvssV4_0":{"Automatable":"NOT_DEFINED","Recovery":"NOT_DEFINED","Safety":"NOT_DEFINED","attackComplexity":"LOW","attackRequirements":"NONE","attackVector":"LOCAL","baseScore":8.5,"baseSeverity":"HIGH","privilegesRequired":"LOW","providerUrgency":"NOT_DEFINED","subAvailabilityImpact":"NONE","subConfidentialityImpact":"NONE","subIntegrityImpact":"NONE","userInteraction":"NONE","valueDensity":"NOT_DEFINED","vectorString":"CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N","version":"4.0","vulnAvailabilityImpact":"HIGH","vulnConfidentialityImpact":"HIGH","vulnIntegrityImpact":"HIGH","vulnerabilityResponseEffort":"NOT_DEFINED"},"format":"CVSS","scenarios":[{"lang":"en","value":"GENERAL"}]},{"cvssV3_1":{"attackComplexity":"LOW","attackVector":"LOCAL","availabilityImpact":"HIGH","baseScore":7.8,"baseSeverity":"HIGH","confidentialityImpact":"HIGH","integrityImpact":"HIGH","privilegesRequired":"LOW","scope":"UNCHANGED","userInteraction":"NONE","vectorString":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","version":"3.1"},"format":"CVSS","scenarios":[{"lang":"en","value":"GENERAL"}]}],"problemTypes":[{"descriptions":[{"cweId":"CWE-276","description":"CWE-276: Incorrect Default Permissions","lang":"en","type":"CWE"}]}],"providerMetadata":{"orgId":"da227ddf-6e25-4b41-b023-0f976dcaca4b","shortName":"lenovo","dateUpdated":"2025-07-17T19:16:16.273Z"},"references":[{"url":"https://support.lenovo.com/us/en/product_security/LEN-182738"}],"solutions":[{"lang":"en","supportingMedia":[{"base64":false,"type":"text/html","value":"<span style=\"background-color: rgb(255, 255, 255);\">Update to the version (or newer) indicated for your model in the Product Impact section:&nbsp;<a target=\"_blank\" rel=\"nofollow\" href=\"https://support.lenovo.com/us/en/product_security/LEN-182738\">https://support.lenovo.com/us/en/product_security/LEN-182738</a></span><br>"}],"value":"Update to the version (or newer) indicated for your model in the Product Impact section:  https://support.lenovo.com/us/en/product_security/LEN-182738"}],"source":{"discovery":"UNKNOWN"},"x_generator":{"engine":"Vulnogram 0.2.0"}},"adp":[{"metrics":[{"other":{"type":"ssvc","content":{"timestamp":"2025-07-17T20:08:57.428883Z","id":"CVE-2025-0886","options":[{"Exploitation":"none"},{"Automatable":"no"},{"Technical Impact":"total"}],"role":"CISA Coordinator","version":"2.0.3"}}}],"title":"CISA ADP Vulnrichment","providerMetadata":{"orgId":"134c704f-9b21-4f2e-91b3-4a467353bcc0","shortName":"CISA-ADP","dateUpdated":"2025-07-17T20:09:10.929Z"}}]}}