A potential missing authentication vulnerability was reported in some Lenovo Tablets that could allow an unauthorized user with physical acc
- Published
- Last modified
- Where the record stands: published, rejected by its publisher, or superseded by another id.What do these mean? →
- published
- Whether CISA lists it in its Known Exploited Vulnerabilities catalog: proof that attackers are using it.What do these mean? →
- Not listed in CISA KEV
- Fix
- Fixed in 17.0.284, 17.0.254, 17.0.084, ZUI_17.0.04.266_ST_251120, 17.0.10.118, and 22 more
- Whether working attack code is public (Exploit-DB, Metasploit, Nuclei or GitHub). Public code makes attacks easier.What do these mean? →
- None on Exploit-DB, Metasploit or GitHub
- Exploitation: none
- Automatable: no
- Technical impact: partial
Summary
A potential missing authentication vulnerability was reported in some Lenovo Tablets that could allow an unauthorized user with physical access to modify Control Center settings if the device is locked when the "Allow Control Center access when locked" option is disabled.
Timeline
- CVE published
- CISA SSVC assessment
Exploitation: none · Automatable: no · Technical impact: partial
- Record last updated
Affected versions
- Lenovo Tab M11 TB330FU TB330XU
fixed in 17.0.284
- Lenovo Tab K11 TB330FU
fixed in 17.0.284
- Lenovo Tab K11 TB330FUP
fixed in 17.0.254
- Lenovo Tab K11 TB330XU
fixed in 17.0.084
- Lenovo Tab K11 TB330XUP
fixed in 17.0.254
- Lenovo Idea Tab Pro TB373FU
fixed in ZUI_17.0.04.266_ST_251120
- Lenovo Tab K9 TB305FU
fixed in 17.0.10.118
- Lenovo Tab K9 TB305XU
fixed in 17.0.10.098
- Lenovo Tab Plus TB351FU
fixed in 17.5.10.023
- Lenovo Tab M8 4th Gen 2024 TB301FU
fixed in TB301FU_USR_S000126_250919_MP1V1111_ROW
- Lenovo Tab M8 4th Gen 2024 TB301XU
fixed in TB301XU_USR_S000147_250919_MP1V1111_ROW
- Lenovo Tab Extreme TB570ZU TB570FU
fixed in 17.5.184
- Lenovo Tab M10 5G TB360ZU
fixed in 16.0.882
- Lenovo Tab M8 4th Gen TB300FU
fixed in TB300XU_USR_S100149_250919_MP1V1111_ROW
- Lenovo Tab M8 4th Gen TB300XU
fixed in TB300FU_USR_S100122_250919_MP1V1111_ROW
- Lenovo Tab M9 TB310FU
fixed in TB310XU_USR_S000913_2510021921_mp1V969_ROW
- Lenovo Tab M9 TB310XU
fixed in TB310FU_USR_S000912_2510022135_mp1V969_ROW
- Lenovo Tab P11 2nd Gen TB350XU
fixed in TB350FU_USER_S231044_2601050946
- Lenovo Tab P11 2nd Gen TB350FU
fixed in TB350XU_USER_S231018_2601050930
- Lenovo Tab P12 TB370FU
fixed in 17.0.267
- Lenovo Tab P12 TB372FU
fixed in 17.0.267
- Lenovo Tab K11 Plus LTE TB352FU
fixed in 17.0.10.250
- Lenovo Tab K11 Plus LTE TB352XU
fixed in 17.0.10.242
- Lenovo Yoga Tab Plus TB520FU
fixed in 17.5.10.036
- Lenovo Tab K11 Gen 2 TB336ZU
fixed in 17.0.10.541
- Lenovo TAB7
fixed in 17.0.10.541
- Lenovo Lenovo Tab with Clear Case TB311FU
fixed in 17.0.30.303
- Lenovo Lenovo Tab with Folio Case TB311XU
fixed in 17.0.31.259
- Lenovo Legion Tab TB321FU
fixed in 17.5.10.031
- Lenovo Legion Tab TB320FC
fixed in 17.0.339
- Lenovo Idea Tab TB336FU
fixed in 17.5.10.041