CVE-2025-14058

2.4 lowEPSS 0.2%

Low (2.4). EPSS 0.2% chance of exploitation in the next 30 days.

A potential missing authentication vulnerability was reported in some Lenovo Tablets that could allow an unauthorized user with physical access to modify Control Center settings if the device is locked when the "Allow Control Center access when locked" option is disabled.

Severity

CVSS 4.0

2.4 low

CVSS:4.0/AV:P/AC:L/AT:N/PR:N/UI:P/VC:N/VI:L/VA:L/SC:N/SI:N/SA:N

CVSS 3.1

3.2 low

CVSS:3.1/AV:P/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:L

EPSS: 0.2% chance of exploitation in the next 30 days; higher than 4% of CVEs (scores of 2026-10-31)
CWE: CWE-306
Published: 2026-01-14
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

References

https://support.lenovo.com/us/en/product_security/LEN-207951

Check your stack JSON