Skip to content
2.4 Low

CVE-2025-14058 A potential missing authentication vulnerability was reported in some Lenovo Tablets that could allow an unauthorized…

Description

A potential missing authentication vulnerability was reported in some Lenovo Tablets that could allow an unauthorized user with physical access to modify Control Center settings if the device is locked when the "Allow Control Center access when locked" option is disabled.

Affected products and versions

Product Affected versions Fixed in
Tab M11 TB330FU TB330XU 17.0 earliest → < 17.0.284 17.0.284
Tab K11 TB330FU 17.0 earliest → < 17.0.284 17.0.284
Tab K11 TB330FUP 17.0 earliest → < 17.0.254 17.0.254
Tab K11 TB330XU 17.0 earliest → < 17.0.084 17.0.084
Tab K11 TB330XUP 17.0 earliest → < 17.0.254 17.0.254
Idea Tab Pro TB373FU Versions not published
Tab K9 TB305FU 17.0 earliest → < 17.0.10.118 17.0.10.118
Tab K9 TB305XU 17.0 earliest → < 17.0.10.098 17.0.10.098
Tab Plus TB351FU 17.5 earliest → < 17.5.10.023 17.5.10.023
Show the 22 other branches
Product Affected versions Fixed in
Tab M8 4th Gen 2024 TB301FU Versions not published
Tab M8 4th Gen 2024 TB301XU Versions not published
Tab Extreme TB570ZU TB570FU 17.5 earliest → < 17.5.184 17.5.184
Tab M10 5G TB360ZU 16.0 earliest → < 16.0.882 16.0.882
Tab M8 4th Gen TB300FU Versions not published
Tab M8 4th Gen TB300XU Versions not published
Tab M9 TB310FU Versions not published
Tab M9 TB310XU Versions not published
Tab P11 2nd Gen TB350XU Versions not published
Tab P11 2nd Gen TB350FU Versions not published
Tab P12 TB370FU 17.0 earliest → < 17.0.267 17.0.267
Tab P12 TB372FU 17.0 earliest → < 17.0.267 17.0.267
Tab K11 Plus LTE TB352FU 17.0 earliest → < 17.0.10.250 17.0.10.250
Tab K11 Plus LTE TB352XU 17.0 earliest → < 17.0.10.242 17.0.10.242
Yoga Tab Plus TB520FU 17.5 earliest → < 17.5.10.036 17.5.10.036
Tab K11 Gen 2 TB336ZU 17.0 earliest → < 17.0.10.541 17.0.10.541
TAB7 17.0 earliest → < 17.0.10.541 17.0.10.541
Lenovo Tab with Clear Case TB311FU 17.0 earliest → < 17.0.30.303 17.0.30.303
Lenovo Tab with Folio Case TB311XU 17.0 earliest → < 17.0.31.259 17.0.31.259
Legion Tab TB321FU 17.5 earliest → < 17.5.10.031 17.5.10.031
Legion Tab TB320FC 17.0 earliest → < 17.0.339 17.0.339
Idea Tab TB336FU 17.5 earliest → < 17.5.10.041 17.5.10.041
The 2 CVEs of Tab M11 TB330FU TB330XU →
Track this CVE