CVE-2017-3741

2017-06-0300:00:00

lenovo

www.cve.org

4 Medium

AI Score

Confidence

High

0.0004 Low

EPSS

Percentile

5.1%

JSON

In the Lenovo Power Management driver before 1.67.12.24, a local user may alter the trackpoint’s firmware and stop the trackpoint from functioning correctly. This issue only affects ThinkPad X1 Carbon 5th generation.

CNA Affected

[
  {
    "product": "Power Management Driver",
    "vendor": "Lenovo Group Ltd.",
    "versions": [
      {
        "status": "affected",
        "version": "ThinkPad X1 Carbon 5th Generation running versions 1.67.12.19 through 1.67.12.23"
      }
    ]
  }
]

References

support.lenovo.com/us/en/product_security/LEN-14440