Unquoted Service Path Privilege Escalation in ElanTech Touchpad Driver - us

Lenovo Security Advisory: LEN-14390

**Potential Impact:**Privilege Escalation

Severity: Medium

**Scope of Impact:**Industry-Wide

**CVE Identifier:**CVE-2017-3757

Summary Description:

An unquoted service path vulnerability was identified in the driver for the ElanTech Touchpad used on some Lenovo brand notebooks (not ThinkPads). This could allow an attacker with local privileges to execute code with administrative privileges.

Mitigation Strategy for Customers (what you should do to protect yourself):

Update your driver by following the links below.