ThinkPad Compact USB Keyboard with TrackPoint Driver Unquoted Service Path - Lenovo Support US

Lenovo Security Advisory: LEN-15061

Potential Impact: Privilege Escalation

Severity: High

**Scope of Impact:**Lenovo Specific

**CVE Identifier:**CVE-2017-3751

Summary Description:

An unquoted service path vulnerability was identified in the driver for the ThinkPad Compact USB Keyboard with TrackPoint. This could allow an attacker with local privileges to execute code with administrative privileges.

Mitigation Strategy for Customers (what you should do to protect yourself):

Update to the latest version of the driver for the ThinkPad Compact USB Keyboard with TrackPoint, version 1.5.5.0 or later. Click here to download the latest version.

Other information and references:

<https://support.lenovo.com/us/en/solutions/pd026745&gt;

For a complete list of all Lenovo Product Security Advisories, click here.

Revision History:

Revision

|

Date

|

Description

—|—|—

1

|

07/27/2017

|

Initial release.

For the most up to date information, please remain current with updates and advisories from Lenovo regarding your equipment and software. The information provided in this advisory is provided on as “as is” basis without any warranty or guarantee of any kind. Lenovo reserves the right to change or update this advisory at any time.