PT-2026-2965 · Lenovo · Lenovo Tablet

Published 2026-01-14 · Updated 2026-01-15 · CVE-2025-14058

Positive Technologies (AI Summary)

CVSS v3.1

3.2

Low

Base vector

AV:P/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:L

Name of the Vulnerable Software and Affected Versions Lenovo Tablets (affected versions not specified)

Description A missing authentication issue exists in some Lenovo Tablets. An unauthorized user with physical access may be able to modify Control Center settings if the device is locked and the "Allow Control Center access when locked" option is disabled.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Missing Authentication

Weakness Enumeration

CWE-306

Related Identifiers

CVE-2025-14058

Affected Products

Lenovo Tablet

References · 3

• https://nvd.nist.gov/vuln/detail/CVE-2025-14058 · Security Note
• https://support.lenovo.com/us/en/product_security/LEN-207951 · Note
• https://twitter.com/CVEnew/status/2011759590661059012 · Twitter Post