CVE-2025-14058

LOW

3.2

Descricao

A potential missing authentication vulnerability was reported in some Lenovo Tablets that could allow an unauthorized user with physical access to modify Control Center settings if the device is locked when the "Allow Control Center access when locked" option is disabled.

Detalhes CVE

Pontuacao CVSS v3.13.2

SeveridadeLOW

Vetor CVSSCVSS:3.1/AV:P/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:L

Vetor de ataquePHYSICAL

ComplexidadeLOW

Privilegios necessariosNONE

Interacao do usuarioREQUIRED

Publicado1/14/2026

Ultima modificacao1/16/2026

Fontenvd

Avistamentos honeypot0

Fraquezas (CWE)

CWE-306

Referencias

https://support.lenovo.com/us/en/product_security/LEN-207951(psirt@lenovo.com)

Correlacoes IOC

Sem correlacoes registradas

This product uses data from the NVD API but is not endorsed or certified by the NVD.