7.8

CVE-2017-3756

A privilege escalation vulnerability was identified in Lenovo Active Protection System for ThinkPad systems versions earlier than 1.82.0.17. An attacker with local privileges could execute code with administrative privileges via an unquoted service path.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Lenovo ≫ Thinkpad 13e Version -
Lenovo ≫ Thinkpad E450 Version -
Lenovo ≫ Thinkpad E450c Version -
Lenovo ≫ Thinkpad E455 Version -
Lenovo ≫ Thinkpad E460 Version -
Lenovo ≫ Thinkpad E465 Version -
Lenovo ≫ Thinkpad E550 Version -
Lenovo ≫ Thinkpad E550c Version -
Lenovo ≫ Thinkpad E555 Version -
Lenovo ≫ Thinkpad E560 Version -
Lenovo ≫ Thinkpad E565 Version -
Lenovo ≫ Thinkpad L440 Version -
Lenovo ≫ Thinkpad L450 Version -
Lenovo ≫ Thinkpad L460 Version -
Lenovo ≫ Thinkpad L540 Version -
Lenovo ≫ Thinkpad L560 Version -
Lenovo ≫ Thinkpad P50 Version -
Lenovo ≫ Thinkpad P50s Version -
Lenovo ≫ Thinkpad P70 Version -
Lenovo ≫ Thinkpad S3 S440 Version -
Lenovo ≫ Thinkpad S540 Version -
Lenovo ≫ Thinkpad T440 Version -
Lenovo ≫ Thinkpad T440p Version -
Lenovo ≫ Thinkpad T440s Version -
Lenovo ≫ Thinkpad T440u Version -
Lenovo ≫ Thinkpad T450 Version -
Lenovo ≫ Thinkpad T450s Version -
Lenovo ≫ Thinkpad T460 Version -
Lenovo ≫ Thinkpad T460p Version -
Lenovo ≫ Thinkpad T460s Version -
Lenovo ≫ Thinkpad T540 Version -
Lenovo ≫ Thinkpad T540p Version -
Lenovo ≫ Thinkpad T550 Version -
Lenovo ≫ Thinkpad T560 Version -
Lenovo ≫ Thinkpad W540 Version -
Lenovo ≫ Thinkpad W541 Version -
Lenovo ≫ Thinkpad W550s Version -
Lenovo ≫ Thinkpad X1 Yoga Version -
Lenovo ≫ Thinkpad X240 Version -
Lenovo ≫ Thinkpad X240s Version -
Lenovo ≫ Thinkpad X260 Version -
Zu dieser CVE wurde keine Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 0.38% 0.292
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
NIST 7.8 1.8 5.9
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
NIST 7.2 3.9 10
AV:L/AC:L/Au:N/C:C/I:C/A:C
Es wurden noch keine Informationen zu CWE veröffentlicht.
http://www.securityfocus.com/bid/100305
Third Party Advisory
VDB Entry
https://support.lenovo.com/us/en/product_security/LEN-15765
Vendor Advisory