Riskcovery

CVE-2025-14058

State
Published
Severity
2.4 Low
Published
Jan 14, 2026
Updated
Jan 15, 2026
Reserved
Dec 4, 2025

Read the record on cve.org

Description

A potential missing authentication vulnerability was reported in some Lenovo Tablets that could allow an unauthorized user with physical access to modify Control Center settings if the device is locked when the "Allow Control Center access when locked" option is disabled.

Scores

CVSSScoreVectorSource
4.02.4 LowCVSS:4.0/AV:P/AC:L/AT:N/PR:N/UI:P/VC:N/VI:L/VA:L/SC:N/SI:N/SA:Nlenovo
3.13.2 LowCVSS:3.1/AV:P/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:Llenovo

Weaknesses

  • CWE-306 Missing Authentication for Critical Function

Affected Products

ProductVersions
Tab M11 TB330FU TB330XULenovo
  • before 17.0.284Affected
Tab K11 TB330FULenovo
  • before 17.0.284Affected
Tab K11 TB330FUPLenovo
  • before 17.0.254Affected
Tab K11 TB330XULenovo
  • before 17.0.084Affected
Tab K11 TB330XUPLenovo
  • before 17.0.254Affected
Idea Tab Pro TB373FULenovo
  • before ZUI_17.0.04.266_ST_251120Affected
Tab K9 TB305FULenovo
  • before 17.0.10.118Affected
Tab K9 TB305XULenovo
  • before 17.0.10.098Affected
Tab Plus TB351FULenovo
  • before 17.5.10.023Affected
Tab M8 4th Gen 2024 TB301FULenovo
  • before TB301FU_USR_S000126_250919_MP1V1111_ROWAffected
Tab M8 4th Gen 2024 TB301XULenovo
  • before TB301XU_USR_S000147_250919_MP1V1111_ROWAffected
Tab Extreme TB570ZU TB570FULenovo
  • before 17.5.184Affected
Tab M10 5G TB360ZULenovo
  • before 16.0.882Affected
Tab M8 4th Gen TB300FULenovo
  • before TB300XU_USR_S100149_250919_MP1V1111_ROWAffected
Tab M8 4th Gen TB300XULenovo
  • before TB300FU_USR_S100122_250919_MP1V1111_ROWAffected
Tab M9 TB310FULenovo
  • before TB310XU_USR_S000913_2510021921_mp1V969_ROWAffected
Tab M9 TB310XULenovo
  • before TB310FU_USR_S000912_2510022135_mp1V969_ROWAffected
Tab P11 2nd Gen TB350XULenovo
  • before TB350FU_USER_S231044_2601050946Affected
Tab P11 2nd Gen TB350FULenovo
  • before TB350XU_USER_S231018_2601050930Affected
Tab P12 TB370FULenovo
  • before 17.0.267Affected
Tab P12 TB372FULenovo
  • before 17.0.267Affected
Tab K11 Plus LTE TB352FULenovo
  • before 17.0.10.250Affected
Tab K11 Plus LTE TB352XULenovo
  • before 17.0.10.242Affected
Yoga Tab Plus TB520FULenovo
  • before 17.5.10.036Affected
Tab K11 Gen 2 TB336ZULenovo
  • before 17.0.10.541Affected
TAB7Lenovo
  • before 17.0.10.541Affected
Lenovo Tab with Clear Case TB311FULenovo
  • before 17.0.30.303Affected
Lenovo Tab with Folio Case TB311XULenovo
  • before 17.0.31.259Affected
Legion Tab TB321FULenovo
  • before 17.5.10.031Affected
Legion Tab TB320FCLenovo
  • before 17.0.339Affected
Idea Tab TB336FULenovo
  • before 17.5.10.041Affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.