CVE-2025-14058
A potential missing authentication vulnerability was reported in some Lenovo Tablets that could...
A potential missing authentication vulnerability was reported in some Lenovo Tablets that could allow an unauthorized user with physical access to modify Control Center settings if the device is locked when the "Allow Control Center access when locked" option is disabled.
Attack profile
How easy it is to exploit
- Attack vector
- Physical
- Complexity
- Low
- Privileges needed
- None
- User interaction
- Passive
What an attacker can affect
- Confidentiality
- None
- Integrity
- Low
- Availability
- Low
Exploit likelihood
What each source reports
CVE List Score used
A potential missing authentication vulnerability was reported in some Lenovo Tablets that could allow an unauthorized user with physical access to modify Control Center settings if the device is locked when the "Allow Control Center access when locked" option is disabled.
- Record
CVE-2025-14058- CVSS 4.0
- 2.4 Low
CVSS:4.0/AV:P/AC:L/AT:N/PR:N/UI:P/VC:N/VI:L/VA:L/SC:N/SI:N/SA:N - CVSS 3.1
- 3.2 Low
CVSS:3.1/AV:P/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:L - Weakness
- CWE-306
- Updated
- 2026-11-02
EUVDEUVD-2026-2841
A potential missing authentication vulnerability was reported in some Lenovo Tablets that could allow an unauthorized user with physical access to modify Control Center settings if the device is locked when the "Allow Control Center access when locked" option is disabled.
- Record
EUVD-2026-2841- CVSS 4.0
- 2.4 Low
CVSS:4.0/AV:P/AC:L/AT:N/PR:N/UI:P/VC:N/VI:L/VA:L/SC:N/SI:N/SA:N - Updated
- 2026-11-02
GitHub AdvisoriesGHSA-frwg-fg7h-vg3h
A potential missing authentication vulnerability was reported in some Lenovo Tablets that could...
A potential missing authentication vulnerability was reported in some Lenovo Tablets that could allow an unauthorized user with physical access to modify Control Center settings if the device is locked when the "Allow Control Center access when locked" option is disabled.
- Record
GHSA-frwg-fg7h-vg3h- CVSS 4.0
- 2.4 Low
CVSS:4.0/AV:P/AC:L/AT:N/PR:N/UI:P/VC:N/VI:L/VA:L/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X - CVSS 3.1
- 3.2 Low
CVSS:3.1/AV:P/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:L - Weakness
- CWE-306
- Updated
- 2026-11-02
NVD
A potential missing authentication vulnerability was reported in some Lenovo Tablets that could allow an unauthorized user with physical access to modify Control Center settings if the device is locked when the "Allow Control Center access when locked" option is disabled.
- Record
CVE-2025-14058- CVSS 4.0
- 2.4 Low
CVSS:4.0/AV:P/AC:L/AT:N/PR:N/UI:P/VC:N/VI:L/VA:L/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X - CVSS 3.1
- 3.2 Low
CVSS:3.1/AV:P/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:L - Weakness
- CWE-306
- Updated
- 2026-11-02
Affected products
- lenovo idea tab pro tb373fu
- lenovo idea tab tb336fu
- lenovo legion tab tb320fc
- lenovo legion tab tb321fu
- lenovo tab with clear case tb311fu
- lenovo tab with folio case tb311xu
- lenovo tab extreme tb570zu tb570fu
- lenovo tab k11 gen 2 tb336zu
- lenovo tab k11 plus lte tb352fu
- lenovo tab k11 plus lte tb352xu
- lenovo tab k11 tb330fu
- lenovo tab k11 tb330fup
Show 19 moreShow less
- lenovo tab k11 tb330xu
- lenovo tab k11 tb330xup
- lenovo tab k9 tb305fu
- lenovo tab k9 tb305xu
- lenovo tab m10 5g tb360zu
- lenovo tab m11 tb330fu tb330xu
- lenovo tab m8 4th gen 2024 tb301fu
- lenovo tab m8 4th gen 2024 tb301xu
- lenovo tab m8 4th gen tb300fu
- lenovo tab m8 4th gen tb300xu
- lenovo tab m9 tb310fu
- lenovo tab m9 tb310xu
- lenovo tab p11 2nd gen tb350fu
- lenovo tab p11 2nd gen tb350xu
- lenovo tab p12 tb370fu
- lenovo tab p12 tb372fu
- lenovo tab plus tb351fu
- lenovo tab7
- lenovo yoga tab plus tb520fu
History
| Recorded | Changed | Sources |
|---|---|---|
| first indexed | CVE List, EUVD, GitHub Advisories, NVD |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2025-14058 is a low vulnerability (CVSS 2.4) in Lenovo Idea Tab Pro Tb373fu, published January 14, 2026. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 0.16%, the 4th percentile. No source names a fixed version.