Lenovo Tablets Missing Authentication Vulnerability Allowing Unauthorized Modification of Control Center Settings

A missing authentication vulnerability exists in certain Lenovo Tablets. This issue could enable an unauthorized user with physical access to alter Control Center settings on a locked device, provided the 'Allow Control Center access when locked' option is turned off.

Impact

Exploitation of this vulnerability could lead to unauthorized changes in the Control Center settings of the affected Lenovo Tablets.

Remediation

Users can update their devices to the minimum fixed version specified in the Lenovo Security Advisory LEN-207951. Instructions for downloading the update are available on the Lenovo Drivers & Software support site.