What is CVE-2025-8421?

CVE-2025-8421 is a medium-severity vulnerability in Lenovo Dock Manager, classified under Incorrect Default Permissions. CVSS score: 6.6/10. Published 2025-11-12.

How severe is CVE-2025-8421?

Medium severity. CVSS v3 base score is 6.6 out of 10.

Vulnerability in Lenovo Dock Manager

CVE-2025-8421

An improper default permission vulnerability was reported in Lenovo Dock Manager that, under certain conditions during installation, could allow an authenticated local user to redirect log files with elevated privileges.

EPSS: 0.001 (0.5th percentile) — read the EPSS interpretation.

CVSS v3 metric

CVSS v3 base score 6.6 (Medium). Vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:N/I:H/A:H.

Affected products

Lenovo Dock Manager — versions 0

Weakness classification (CWE)

CWE-276 — Incorrect Default Permissions

References

psirt@lenovo.com

Frequently asked questions

What is CVE-2025-8421?: CVE-2025-8421 is a medium-severity vulnerability in Lenovo Dock Manager, classified under Incorrect Default Permissions. CVSS score: 6.6/10. Published 2025-11-12.
How severe is CVE-2025-8421?: Medium severity. CVSS v3 base score is 6.6 out of 10.