Lucene search

[email protected]CVE-2017-3756

HistoryAug 18, 2017 - 7:29 p.m.

CVE-2017-3756

2017-08-1819:29:00

[email protected]

web.nvd.nist.gov

cve-2017-3756

lenovo

active protection system

thinkpad

privilege escalation

vulnerability

unquoted service path

7.2 High

CVSS2

Attack Vector

LOCAL

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:L/AC:L/Au:N/C:C/I:C/A:C

7.8 High

CVSS3

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

7.9 High

AI Score

Confidence

High

0.0004 Low

EPSS

Percentile

5.1%

JSON

A privilege escalation vulnerability was identified in Lenovo Active Protection System for ThinkPad systems versions earlier than 1.82.0.17. An attacker with local privileges could execute code with administrative privileges via an unquoted service path.

Affected configurations

NVD

Node

lenovothinkpad_10_ella_2_biosMatch-

lenovothinkpad_11e_beema_biosMatch-

lenovothinkpad_11e_braswell_biosMatch-

lenovothinkpad_11e_broadwell_biosMatch-

lenovothinkpad_11e_skylake_biosMatch-

lenovothinkpad_13e_biosMatch-

lenovothinkpad_e450_biosMatch-

lenovothinkpad_e450c_biosMatch-

lenovothinkpad_e455_biosMatch-

lenovothinkpad_e460_biosMatch-

lenovothinkpad_e465_biosMatch-

lenovothinkpad_e550_biosMatch-

lenovothinkpad_e550c_biosMatch-

lenovothinkpad_e555_biosMatch-

lenovothinkpad_e560_biosMatch-

lenovothinkpad_e565_biosMatch-

lenovothinkpad_edge_e440_biosMatch-

lenovothinkpad_edge_e445_biosMatch-

lenovothinkpad_edge_e540_biosMatch-

lenovothinkpad_edge_e545_biosMatch-

lenovothinkpad_helix_20cg_biosMatch-

lenovothinkpad_helix_20ch_biosMatch-

lenovothinkpad_l440_biosMatch-

lenovothinkpad_l450_biosMatch-

lenovothinkpad_l460_biosMatch-

lenovothinkpad_l540_biosMatch-

lenovothinkpad_l560_biosMatch-

lenovothinkpad_p50_biosMatch-

lenovothinkpad_p50s_biosMatch-

lenovothinkpad_p70_biosMatch-

lenovothinkpad_s1_yoga_12_biosMatch-

lenovothinkpad_s1_yoga_non_vpro_biosMatch-

lenovothinkpad_s1_yoga_vpro_biosMatch-

lenovothinkpad_s3_s440_biosMatch-

lenovothinkpad_s3_yoga_14_biosMatch-

lenovothinkpad_s5_e560p_biosMatch-

lenovothinkpad_s5_yoga_15_biosMatch-

lenovothinkpad_s540_biosMatch-

lenovothinkpad_t440_biosMatch-

lenovothinkpad_t440p_biosMatch-

lenovothinkpad_t440s_biosMatch-

lenovothinkpad_t440u_biosMatch-

lenovothinkpad_t450_biosMatch-

lenovothinkpad_t450s_biosMatch-

lenovothinkpad_t460_biosMatch-

lenovothinkpad_t460p_biosMatch-

lenovothinkpad_t460s_biosMatch-

lenovothinkpad_t540_biosMatch-

lenovothinkpad_t540p_biosMatch-

lenovothinkpad_t550_biosMatch-

lenovothinkpad_t560_biosMatch-

lenovothinkpad_tablet_10_biosMatch-

lenovothinkpad_tablet_8_biosMatch-

lenovothinkpad_w540_biosMatch-

lenovothinkpad_w541_biosMatch-

lenovothinkpad_w550s_biosMatch-

lenovothinkpad_x1_carbon_20ax_biosMatch-

lenovothinkpad_x1_carbon_20bx_biosMatch-

lenovothinkpad_x1_carbon_biosMatch-

lenovothinkpad_x1_tablet_biosMatch-

lenovothinkpad_x1_yoga_biosMatch-

lenovothinkpad_x140e_amd_biosMatch-

lenovothinkpad_x240_biosMatch-

lenovothinkpad_x240s_biosMatch-

lenovothinkpad_x250_broadwell_biosMatch-

lenovothinkpad_x250_sharkbay_biosMatch-

lenovothinkpad_x260_biosMatch-

lenovothinkpad_yoga_11e_beema_biosMatch-

lenovothinkpad_yoga_11e_biosMatch-

lenovothinkpad_yoga_11e_braswell_biosMatch-

lenovothinkpad_yoga_11e_broadwell_biosMatch-

lenovothinkpad_yoga_11e_skylake_biosMatch-

lenovothinkpad_yoga_14_460_s3_biosMatch-

lenovothinkpad_yoga_260_s1_biosMatch-

AND

lenovothinkpad_10_ella_2Match-

lenovothinkpad_11e_beemaMatch-

lenovothinkpad_11e_braswellMatch-

lenovothinkpad_11e_broadwellMatch-

lenovothinkpad_11e_skylakeMatch-

lenovothinkpad_13eMatch-

lenovothinkpad_e450Match-

lenovothinkpad_e450cMatch-

lenovothinkpad_e455Match-

lenovothinkpad_e460Match-

lenovothinkpad_e465Match-

lenovothinkpad_e550Match-

lenovothinkpad_e550cMatch-

lenovothinkpad_e555Match-

lenovothinkpad_e560Match-

lenovothinkpad_e565Match-

lenovothinkpad_edge_e440Match-

lenovothinkpad_edge_e445Match-

lenovothinkpad_edge_e540Match-

lenovothinkpad_edge_e545Match-

lenovothinkpad_helix_20cgMatch-

lenovothinkpad_helix_20chMatch-

lenovothinkpad_l440Match-

lenovothinkpad_l450Match-

lenovothinkpad_l460Match-

lenovothinkpad_l540Match-

lenovothinkpad_l560Match-

lenovothinkpad_p50Match-

lenovothinkpad_p50sMatch-

lenovothinkpad_p70Match-

lenovothinkpad_s1_yoga_12Match-

lenovothinkpad_s1_yoga_non_vproMatch-

lenovothinkpad_s1_yoga_vproMatch-

lenovothinkpad_s3_s440Match-

lenovothinkpad_s3_yoga_14Match-

lenovothinkpad_s5_e560pMatch-

lenovothinkpad_s5_yoga_15Match-

lenovothinkpad_s540Match-

lenovothinkpad_t440Match-

lenovothinkpad_t440pMatch-

lenovothinkpad_t440sMatch-

lenovothinkpad_t440uMatch-

lenovothinkpad_t450Match-

lenovothinkpad_t450sMatch-

lenovothinkpad_t460Match-

lenovothinkpad_t460pMatch-

lenovothinkpad_t460sMatch-

lenovothinkpad_t540Match-

lenovothinkpad_t540pMatch-

lenovothinkpad_t550Match-

lenovothinkpad_t560Match-

lenovothinkpad_tablet_10Match-

lenovothinkpad_tablet_8Match-

lenovothinkpad_w540Match-

lenovothinkpad_w541Match-

lenovothinkpad_w550sMatch-

lenovothinkpad_x1_carbonMatch-

lenovothinkpad_x1_carbon_20axMatch-

lenovothinkpad_x1_carbon_20bxMatch-

lenovothinkpad_x1_tabletMatch-

lenovothinkpad_x1_yogaMatch-

lenovothinkpad_x140e_amdMatch-

lenovothinkpad_x240Match-

lenovothinkpad_x240sMatch-

lenovothinkpad_x250_broadwellMatch-

lenovothinkpad_x250_sharkbayMatch-

lenovothinkpad_x260Match-

lenovothinkpad_yoga_11eMatch-

lenovothinkpad_yoga_11e_beemaMatch-

lenovothinkpad_yoga_11e_braswellMatch-

lenovothinkpad_yoga_11e_broadwellMatch-

lenovothinkpad_yoga_11e_skylakeMatch-

lenovothinkpad_yoga_14_460_s3Match-

lenovothinkpad_yoga_260_s1Match-

AND

microsoftwindows_10

microsoftwindows_7

microsoftwindows_8.1

CPENameOperatorVersion
lenovo:thinkpad_10_ella_2_bioslenovo thinkpad 10 ella 2 bioseq-
lenovo:thinkpad_11e_beema_bioslenovo thinkpad 11e beema bioseq-
lenovo:thinkpad_11e_braswell_bioslenovo thinkpad 11e braswell bioseq-
lenovo:thinkpad_11e_broadwell_bioslenovo thinkpad 11e broadwell bioseq-
lenovo:thinkpad_11e_skylake_bioslenovo thinkpad 11e skylake bioseq-
lenovo:thinkpad_13e_bioslenovo thinkpad 13e bioseq-
lenovo:thinkpad_e450_bioslenovo thinkpad e450 bioseq-
lenovo:thinkpad_e450c_bioslenovo thinkpad e450c bioseq-
lenovo:thinkpad_e455_bioslenovo thinkpad e455 bioseq-
lenovo:thinkpad_e460_bioslenovo thinkpad e460 bioseq-

CPE	Name	Operator	Version
lenovo:thinkpad_10_ella_2_bios	lenovo thinkpad 10 ella 2 bios	eq	-
lenovo:thinkpad_11e_beema_bios	lenovo thinkpad 11e beema bios	eq	-
lenovo:thinkpad_11e_braswell_bios	lenovo thinkpad 11e braswell bios	eq	-
lenovo:thinkpad_11e_broadwell_bios	lenovo thinkpad 11e broadwell bios	eq	-
lenovo:thinkpad_11e_skylake_bios	lenovo thinkpad 11e skylake bios	eq	-
lenovo:thinkpad_13e_bios	lenovo thinkpad 13e bios	eq	-
lenovo:thinkpad_e450_bios	lenovo thinkpad e450 bios	eq	-
lenovo:thinkpad_e450c_bios	lenovo thinkpad e450c bios	eq	-
lenovo:thinkpad_e455_bios	lenovo thinkpad e455 bios	eq	-
lenovo:thinkpad_e460_bios	lenovo thinkpad e460 bios	eq	-

Rows per page:

1-10 of 1481

CNA Affected

[
  {
    "product": "ThinkPad Active Protection System",
    "vendor": "Lenovo Group Ltd.",
    "versions": [
      {
        "status": "affected",
        "version": "Earlier than 1.82.0.17"
      }
    ]
  }
]

References

www.securityfocus.com/bid/100305

support.lenovo.com/us/en/product_security/LEN-15765

7.2 High

CVSS2

Attack Vector

LOCAL

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:L/AC:L/Au:N/C:C/I:C/A:C

7.8 High

CVSS3

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

7.9 High

AI Score

Confidence

High

0.0004 Low

EPSS

Percentile

5.1%

JSON

Related for CVE-2017-3756

lenovo2 prion1 nvd1 cvelist1 openvas1