Login Request a demo
Low severity · published Jan 14, 2026
CVE-2025-14058
A potential missing authentication vulnerability was reported in some Lenovo Tablets that could allow an unauthorized user with physical access to modify Control Center settings…
3.2
CVSS
0.2%
EPSS
No
On KEV
Description
A potential missing authentication vulnerability was reported in some Lenovo Tablets that could allow an unauthorized user with physical access to modify Control Center settings if the device is locked when the "Allow Control Center access when locked" option is disabled.
CVSS vector
CVSS:3.1/AV:P/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:L
Attack vector
Physical
Complexity
Low
Privileges
None
User interaction
Required
Confidentiality
None
Integrity
Low
Availability
Low
Scope
Unchanged
Exploitation
Is it being used?
Exploit prediction (EPSS)0.2% · higher than 5% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
IT
Idea Tab Pro TB373FU · Lenovo
before ZUI_17.0.04.266_ST_251120 · source: vendor
IT
Idea Tab TB336FU · Lenovo
before 17.5.10.041 · source: vendor
LT
Legion Tab TB320FC · Lenovo
before 17.0.339 · source: vendor
LT
Legion Tab TB321FU · Lenovo
before 17.5.10.031 · source: vendor
LT
Lenovo Tab with Clear Case TB311FU · Lenovo
before 17.0.30.303 · source: vendor
LT
Lenovo Tab with Folio Case TB311XU · Lenovo
before 17.0.31.259 · source: vendor
TA
TAB7 · Lenovo
before 17.0.10.541 · source: vendor
TE
Tab Extreme TB570ZU TB570FU · Lenovo
before 17.5.184 · source: vendor
TK
Tab K11 Gen 2 TB336ZU · Lenovo
before 17.0.10.541 · source: vendor
TK
Tab K11 Plus LTE TB352FU · Lenovo
before 17.0.10.250 · source: vendor
TK
Tab K11 Plus LTE TB352XU · Lenovo
before 17.0.10.242 · source: vendor
TK
Tab K11 TB330FU · Lenovo
before 17.0.284 · source: vendor
Affected product
IT
Idea Tab Pro TB373FU
Lenovo
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2025-14058
CVE.org
https://www.cve.org/CVERecord?id=CVE-2025-14058
support.lenovo.com
https://support.lenovo.com/us/en/product_security/LEN-207951
More from Idea Tab Pro TB373FU
6.8
CVE-2026-89057
A potential authentication bypass vulnerability was reported in some Lenovo tablets that could allow a user with physical access to gain unauthorized device access
6.4
CVE-2026-92777
A potential vulnerability was reported in some Lenovo Tablets that could allow a user with physical access to an unlocked tablet to bypass device protections and execute arbitrary…