IT

Tracker / CVE-2017-3756

CVE-2017-3756

High 7.8

A privilege escalation vulnerability was identified in Lenovo Active Protection System for ThinkPad systems versions earlier than 1.82.0.17. An attacker with local privileges could execute code with administrative privileges via an unquoted service path.

Affected products and versions

lenovo thinkpad_10_ella_2
lenovo thinkpad_10_ella_2_bios
lenovo thinkpad_11e_beema
lenovo thinkpad_11e_beema_bios
lenovo thinkpad_11e_braswell
lenovo thinkpad_11e_braswell_bios
lenovo thinkpad_11e_broadwell
lenovo thinkpad_11e_broadwell_bios
lenovo thinkpad_11e_skylake
lenovo thinkpad_11e_skylake_bios
lenovo thinkpad_13e
lenovo thinkpad_13e_bios
lenovo thinkpad_e450
lenovo thinkpad_e450_bios
lenovo thinkpad_e450c
lenovo thinkpad_e450c_bios
lenovo thinkpad_e455
lenovo thinkpad_e455_bios
lenovo thinkpad_e460
lenovo thinkpad_e460_bios
lenovo thinkpad_e465
lenovo thinkpad_e465_bios
lenovo thinkpad_e550
lenovo thinkpad_e550_bios
lenovo thinkpad_e550c
lenovo thinkpad_e550c_bios
lenovo thinkpad_e555
lenovo thinkpad_e555_bios
lenovo thinkpad_e560
lenovo thinkpad_e560_bios
lenovo thinkpad_e565
lenovo thinkpad_e565_bios
lenovo thinkpad_edge_e440
lenovo thinkpad_edge_e440_bios
lenovo thinkpad_edge_e445
lenovo thinkpad_edge_e445_bios
lenovo thinkpad_edge_e540
lenovo thinkpad_edge_e540_bios
lenovo thinkpad_edge_e545
lenovo thinkpad_edge_e545_bios
lenovo thinkpad_helix_20cg
lenovo thinkpad_helix_20cg_bios
lenovo thinkpad_helix_20ch
lenovo thinkpad_helix_20ch_bios
lenovo thinkpad_l440
lenovo thinkpad_l440_bios
lenovo thinkpad_l450
lenovo thinkpad_l450_bios
lenovo thinkpad_l460
lenovo thinkpad_l460_bios
lenovo thinkpad_l540
lenovo thinkpad_l540_bios
lenovo thinkpad_l560
lenovo thinkpad_l560_bios
lenovo thinkpad_p50
lenovo thinkpad_p50_bios
lenovo thinkpad_p50s
lenovo thinkpad_p50s_bios
lenovo thinkpad_p70
lenovo thinkpad_p70_bios

Analysis

This page is not indexable yet.Until it carries original analysis — what it actually exposes, how to check in two minutes whether a system was touched, what to do if it was — the page stays noindex. The database decides that, not the template.

References