CVE-2025-8421: Dock Manager 0 to before 1.6.5.2

CVE-2025-8421. CVSS 3.1 base score 6.6 (MEDIUM, Vendor/CNA). EPSS 0.0011 (percentile 0.01201), scored 17-Oct-2026.

Affected technology

Dock Manager · 0 to before 1.6.5.2
Lenovo

Component: Not specified by the source

Attack conditions (Vendor/CNA, CVSS 4.0): Local · Low privileges required · Passive user interaction

What an attacker can do

The source says an improper default permission vulnerability was reported in Lenovo Dock Manager that, under certain conditions during installation, could allow an authenticated local user to redirect log files with elevated privileges. Vendor/CNA’s CVSS 4.0 assessment (base score 5.2/10) rates confidentiality impact as none; integrity and availability impact as high.

Published 18-Oct-2026 20:24 UTC

CWE: CWE-276
CCR priority: 26.4 /100 (P4)
CVSS 3.1: 6.6 /10 · CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:N/I:H/A:H · Vendor/CNA
EPSS: 0.0011 · percentile 0.01201 · 2026-10-17
KEV: no

Provenance

NVD CVE API 2.0 · Source record · observed 2026-10-18 20:23:06.032219+00:00 UTC

Stable permalink: https://cybercodered.org/item/cve-cve-2025-8421.html