CVE-2025-14058

LOW

3.2

Description

A potential missing authentication vulnerability was reported in some Lenovo Tablets that could allow an unauthorized user with physical access to modify Control Center settings if the device is locked when the "Allow Control Center access when locked" option is disabled.

CVE Details

CVSS v3.1 Score3.2

SeverityLOW

CVSS VectorCVSS:3.1/AV:P/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:L

Attack VectorPHYSICAL

ComplexityLOW

Privileges RequiredNONE

User InteractionREQUIRED

Published1/14/2026

Last Modified1/16/2026

Sourcenvd

Honeypot Sightings0

Weaknesses (CWE)

CWE-306

References

https://support.lenovo.com/us/en/product_security/LEN-207951(psirt@lenovo.com)

IOC Correlations

No correlations recorded

This product uses data from the NVD API but is not endorsed or certified by the NVD.