CVE-2017-3751

2017-07-2700:00:00

lenovo

www.cve.org

8.2 High

AI Score

Confidence

High

0.0004 Low

EPSS

Percentile

5.1%

JSON

An unquoted service path vulnerability was identified in the driver for the ThinkPad Compact USB Keyboard with TrackPoint versions earlier than 1.5.5.0. This could allow an attacker with local privileges to execute code with administrative privileges.

CNA Affected

[
  {
    "product": "ThinkPad Compact USB Keyboard with TrackPoint Driver",
    "vendor": "Lenovo Group Ltd.",
    "versions": [
      {
        "status": "affected",
        "version": "Earlier than 1.5.5.0"
      }
    ]
  }
]

References

support.lenovo.com/us/en/product_security/LEN-15061