Veille CVE
CVE-2026-89057
6.8 MoyenneDescription
A potential authentication bypass vulnerability was reported in some Lenovo tablets that could allow a user with physical access to gain unauthorized device access.
Produits concernés
- Lenovo Idea Tab Pro (TB373FU)
- Lenovo Idea Tab/ Lenovo Tab K11 Gen 2 (TB336FU)
- Lenovo Idea Tab/ Lenovo Tab K11 Gen 2 (TB336FU/TB336ZU)
- Lenovo Idea Tab/ Lenovo Tab K11 Gen 2 (TB336ZU)
- Lenovo Legion Tab (8.8", 3) (TB321FU)
- Lenovo Tab M11 (TB330FU)
- Lenovo Tab M11 (TB330FU/TB330XU)
- Lenovo Tab M11 (TB330XU)
- Lenovo Tab Extreme (TB570FU)
- Lenovo Tab Extreme (TB570ZU)
- Lenovo Tab Extreme (TB570ZU/TB570FU)
- Lenovo Tab K11 (TB330FUP)
- Lenovo Tab K11 (TB330XUP)
- Lenovo Tab K11 Plus (TB352FU)
- Lenovo Tab K11 Plus (TB352XU)
- Lenovo Tab K11 Plus LTE ROW (TB352XU)
- Lenovo Tab K11 Plus WIFI ROW: TB352FU
- Lenovo Tab M10 5G (TB360ZU)
- Lenovo Tab K9 (TB305FU)
- Lenovo Tab K9 (TB305XU)
- Lenovo Tab One (TB305FU)
- Lenovo Tab One (TB305XU)
- Lenovo Tab P12 (TB370FU)
- Lenovo Tab P12 (TB370FU/TB372FU)
- Lenovo Tab P12 (TB372FU)
Scores CVSS
| Version | Score | Source | Vecteur |
|---|---|---|---|
| 4.0 | 7.0 Élevée | psirt@lenovo.com | CVSS:4.0/AV:P/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X |
| 3.1 | 6.8 Moyenne | psirt@lenovo.com | CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H |