Lenovo Tablet Auth Bypass: Obsolete Control Center Setting
CVE-2025-14058 Published on January 14, 2026
A potential missing authentication vulnerability was reported in some Lenovo Tablets that could allow an unauthorized user with physical access to modify Control Center settings if the device is locked when the "Allow Control Center access when locked" option is disabled.
Vulnerability Analysis
CVE-2025-14058 is exploitable with physical access, requires user interaction. This vulnerability is considered to have a low attack complexity. The potential impact of an exploit of this vulnerability is considered to have no impact on confidentiality, with no impact on integrity and availability.
Weakness Type
Missing Authentication for Critical Function
The software does not perform any authentication for functionality that requires a provable user identity or consumes a significant amount of resources.
Products Associated with CVE-2025-14058
Want to know whenever a new CVE is published for Lenovo products? stack.watch will email you.
Affected Versions
Lenovo Tab M11 TB330FU TB330XU:- Before 17.0.284 is affected.
- Before 17.0.284 is affected.
- Before 17.0.254 is affected.
- Before 17.0.084 is affected.
- Before 17.0.254 is affected.
- Before ZUI_17.0.04.266_ST_251120 is affected.
- Before 17.0.10.118 is affected.
- Before 17.0.10.098 is affected.
- Before 17.5.10.023 is affected.
- Before TB301FU_USR_S000126_250919_MP1V1111_ROW is affected.
- Before TB301XU_USR_S000147_250919_MP1V1111_ROW is affected.
- Before 17.5.184 is affected.
- Before 16.0.882 is affected.
- Before TB300XU_USR_S100149_250919_MP1V1111_ROW is affected.
- Before TB300FU_USR_S100122_250919_MP1V1111_ROW is affected.
- Before TB310XU_USR_S000913_2510021921_mp1V969_ROW is affected.
- Before TB310FU_USR_S000912_2510022135_mp1V969_ROW is affected.
- Before TB350FU_USER_S231044_2601050946 is affected.
- Before TB350XU_USER_S231018_2601050930 is affected.
- Before 17.0.267 is affected.
- Before 17.0.267 is affected.
- Before 17.0.10.250 is affected.
- Before 17.0.10.242 is affected.
- Before 17.5.10.036 is affected.
- Before 17.0.10.541 is affected.
- Before 17.0.10.541 is affected.
- Before 17.0.30.303 is affected.
- Before 17.0.31.259 is affected.
- Before 17.5.10.031 is affected.
- Before 17.0.339 is affected.
- Before 17.5.10.041 is affected.
Exploit Probability
EPSS (Exploit Prediction Scoring System) scores estimate the probability that a vulnerability will be exploited in the wild within the next 30 days. The percentile shows you how this score compares to all other vulnerabilities.