CVE-2017-3756

2017-08-1000:00:00

lenovo

www.cve.org

8.4 High

AI Score

Confidence

High

0.0004 Low

EPSS

Percentile

5.1%

JSON

A privilege escalation vulnerability was identified in Lenovo Active Protection System for ThinkPad systems versions earlier than 1.82.0.17. An attacker with local privileges could execute code with administrative privileges via an unquoted service path.

CNA Affected

[
  {
    "product": "ThinkPad Active Protection System",
    "vendor": "Lenovo Group Ltd.",
    "versions": [
      {
        "status": "affected",
        "version": "Earlier than 1.82.0.17"
      }
    ]
  }
]