CVE-2017-3757

2017-08-2820:00:00

lenovo

www.cve.org

AI Score

8.3

Confidence

High

EPSS

Percentile

5.1%

JSON

An unquoted service path vulnerability was identified in the driver for the ElanTech Touchpad, various versions, used on some Lenovo brand notebooks (not ThinkPads). This could allow an attacker with local privileges to execute code with administrative privileges.

CNA Affected

[
  {
    "product": "Lenovo ElanTech Touchpad driver",
    "vendor": "Lenovo Group Ltd.",
    "versions": [
      {
        "status": "affected",
        "version": "various versions"
      }
    ]
  }
]

References

support.lenovo.com/us/en/product_security/LEN-14390