Skip to content
Fencer Intel
low 3.2

CVE-2025-14058 json

A potential missing authentication vulnerability was reported in some Lenovo Tablets that could allow an unauthorized user with physical ac…

published 9mo ago modified 4mo ago also EUVD-2026-2841

cvss
3.2
version 3.1, CNA
cisa kev
Not listed
not in CISA's catalog
epss
0.2%
EPSS 0.2% chance of exploitation in 30 days, percentile 4%
public exploits
0
none known

Summary

A potential missing authentication vulnerability was reported in some Lenovo Tablets that could allow an unauthorized user with physical access to modify Control Center settings if the device is locked when the "Allow Control Center access when locked" option is disabled.

Patch / fix

  • Lenovo Tab M11 TB330FU TB330XU 17.0.284
  • Lenovo Tab K11 TB330FU 17.0.284
  • Lenovo Tab K11 TB330FUP 17.0.254
  • Lenovo Tab K11 TB330XU 17.0.084
  • Lenovo Tab K11 TB330XUP 17.0.254
  • Lenovo Idea Tab Pro TB373FU ZUI_17.0.04.266_ST_251120
  • Lenovo Tab K9 TB305FU 17.0.10.118
  • Lenovo Tab K9 TB305XU 17.0.10.098
  • Lenovo Tab Plus TB351FU 17.5.10.023
  • Lenovo Tab M8 4th Gen 2024 TB301FU TB301FU_USR_S000126_250919_MP1V1111_ROW
  • Lenovo Tab M8 4th Gen 2024 TB301XU TB301XU_USR_S000147_250919_MP1V1111_ROW
  • Lenovo Tab Extreme TB570ZU TB570FU 17.5.184
  • Lenovo Tab M10 5G TB360ZU 16.0.882
  • Lenovo Tab M8 4th Gen TB300FU TB300XU_USR_S100149_250919_MP1V1111_ROW
  • Lenovo Tab M8 4th Gen TB300XU TB300FU_USR_S100122_250919_MP1V1111_ROW
  • Lenovo Tab M9 TB310FU TB310XU_USR_S000913_2510021921_mp1V969_ROW
  • Lenovo Tab M9 TB310XU TB310FU_USR_S000912_2510022135_mp1V969_ROW
  • Lenovo Tab P11 2nd Gen TB350XU TB350FU_USER_S231044_2601050946
  • Lenovo Tab P11 2nd Gen TB350FU TB350XU_USER_S231018_2601050930
  • Lenovo Tab P12 TB370FU 17.0.267
  • Lenovo Tab P12 TB372FU 17.0.267
  • Lenovo Tab K11 Plus LTE TB352FU 17.0.10.250
  • Lenovo Tab K11 Plus LTE TB352XU 17.0.10.242
  • Lenovo Yoga Tab Plus TB520FU 17.5.10.036
  • Lenovo Tab K11 Gen 2 TB336ZU 17.0.10.541
  • Lenovo TAB7 17.0.10.541
  • Lenovo Lenovo Tab with Clear Case TB311FU 17.0.30.303
  • Lenovo Lenovo Tab with Folio Case TB311XU 17.0.31.259
  • Lenovo Legion Tab TB321FU 17.5.10.031
  • Lenovo Legion Tab TB320FC 17.0.339

Is CVE-2025-14058 in your stack? Fencer shows which of your repositories are affected as soon as an advisory lands, and opens the fix as a pull request.

Check with Fencer

CISA SSVC

Exploitation
none
Automatable
no
Technical impact
partial
Assessed
9mo ago

Exploit prediction

0.16% chance of exploitation in the next 30 days, higher than 4% of all scored CVEs (FIRST EPSS, 2026-11-11).

CVSS scores

assigned by version score vector
CNA 4.0 2.4 CVSS:4.0/AV:P/AC:L/AT:N/PR:N/UI:P/VC:N/VI:L/VA:L/SC:N/SI:N/SA:N
CNA 3.1 3.2 CVSS:3.1/AV:P/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:L
CNA 4.0 2.4 CVSS:4.0/AV:P/AC:L/AT:N/PR:N/UI:P/VC:N/VI:L/VA:L/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

Affected products

  • Lenovo Tab M11 TB330FU TB330XU
  • Lenovo Tab K11 TB330FU
  • Lenovo Tab K11 TB330FUP
  • Lenovo Tab K11 TB330XU
  • Lenovo Tab K11 TB330XUP
  • Lenovo Idea Tab Pro TB373FU
  • Lenovo Tab K9 TB305FU
  • Lenovo Tab K9 TB305XU
  • Lenovo Tab Plus TB351FU
  • Lenovo Tab M8 4th Gen 2024 TB301FU
  • Lenovo Tab M8 4th Gen 2024 TB301XU
  • Lenovo Tab Extreme TB570ZU TB570FU
  • Lenovo Tab M10 5G TB360ZU
  • Lenovo Tab M8 4th Gen TB300FU
  • Lenovo Tab M8 4th Gen TB300XU
  • Lenovo Tab M9 TB310FU
  • Lenovo Tab M9 TB310XU
  • Lenovo Tab P11 2nd Gen TB350XU
  • Lenovo Tab P11 2nd Gen TB350FU
  • Lenovo Tab P12 TB370FU
  • Lenovo Tab P12 TB372FU
  • Lenovo Tab K11 Plus LTE TB352FU
  • Lenovo Tab K11 Plus LTE TB352XU
  • Lenovo Yoga Tab Plus TB520FU
  • Lenovo Tab K11 Gen 2 TB336ZU
  • Lenovo TAB7
  • Lenovo Lenovo Tab with Clear Case TB311FU
  • Lenovo Lenovo Tab with Folio Case TB311XU
  • Lenovo Legion Tab TB321FU
  • Lenovo Legion Tab TB320FC
  • Lenovo Idea Tab TB336FU

Classification

Weakness
  • CWE-306 Missing Authentication for Critical Functionality

References

Sources

Fencer Intel keeps one entry per vulnerability: the CVE id wins, then GHSA, and records that alias each other are merged, except that two CVEs always keep separate entries. The same data is available as JSON.