VULNERABILITY INTELLIGENCE
CVE-2025-14058
CVSS score3.2 LOW
EPSS probability0.16%
CISA KEVNot currently listed
Published2026-01-14
Last modified2026-06-17
CVSS vectorCVSS:3.1/AV:P/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:L
Description
A potential missing authentication vulnerability was reported in some Lenovo Tablets that could allow an unauthorized user with physical access to modify Control Center settings if the device is locked when the "Allow Control Center access when locked" option is disabled.
Weakness classification
- psirt@lenovo.com: CWE-306