7.8

CVE-2017-3767

A local privilege escalation vulnerability was identified in the Realtek audio driver versions prior to 6.0.1.8224 in some Lenovo ThinkPad products. An attacker with local privileges could execute code with administrative privileges.

Data is provided by the National Vulnerability Database (NVD)
Realtek ≫ Audio Driver Firmware Version < 6.0.1.8224
   Lenovo ≫ Thinkpad 10 Version-
   Lenovo ≫ Thinkpad 11e Version-
   Lenovo ≫ Thinkpad 13 Version-
   Lenovo ≫ Thinkpad L450 Version-
   Lenovo ≫ Thinkpad L460 Version-
   Lenovo ≫ Thinkpad L470 Kbl Version-
   Lenovo ≫ Thinkpad L470 Skl Version-
   Lenovo ≫ Thinkpad L560 Version-
   Lenovo ≫ Thinkpad P50 Version-
   Lenovo ≫ Thinkpad P50s Version-
   Lenovo ≫ Thinkpad P51s Version-
   Lenovo ≫ Thinkpad P70 Version-
   Lenovo ≫ Thinkpad P71 Version-
   Lenovo ≫ Thinkpad S1 Version-
   Lenovo ≫ Thinkpad S1 Yoga Version-
   Lenovo ≫ Thinkpad S1 Yoga 12 Version-
   Lenovo ≫ Thinkpad S2 Version-
   Lenovo ≫ Thinkpad T440 Version-
   Lenovo ≫ Thinkpad T440p Version-
   Lenovo ≫ Thinkpad T440s Version-
   Lenovo ≫ Thinkpad T450 Version-
   Lenovo ≫ Thinkpad T450s Version-
   Lenovo ≫ Thinkpad T460 Version-
   Lenovo ≫ Thinkpad T460p Version-
   Lenovo ≫ Thinkpad T460s Version-
   Lenovo ≫ Thinkpad T470 Version-
   Lenovo ≫ Thinkpad T470p Version-
   Lenovo ≫ Thinkpad T470s Skl Version-
   Lenovo ≫ Thinkpad T540p Version-
   Lenovo ≫ Thinkpad T550 Version-
   Lenovo ≫ Thinkpad T560 Version-
   Lenovo ≫ Thinkpad T570 Version-
   Lenovo ≫ Thinkpad W540 Version-
   Lenovo ≫ Thinkpad W541 Version-
   Lenovo ≫ Thinkpad W550s Version-
   Lenovo ≫ Thinkpad X1 Carbon Version-
   Lenovo ≫ Thinkpad X1 Tablet Version-
   Lenovo ≫ Thinkpad X1 Yoga Version-
   Lenovo ≫ Thinkpad X1c Version-
   Lenovo ≫ Thinkpad X240 Version-
   Lenovo ≫ Thinkpad X240s Version-
   Lenovo ≫ Thinkpad X250 Version-
   Lenovo ≫ Thinkpad X260 Version-
   Lenovo ≫ Thinkpad X270 Kbl Version-
   Lenovo ≫ Thinkpad X270 Skl Version-
   Lenovo ≫ Thinkpad Yoga 11e Version-
Zu dieser CVE wurde keine CISA KEV oder CERT.AT-Warnung gefunden.
EPSS Metriken
Type Source Score Percentile
EPSS FIRST.org 0.03% 0.063
CVSS Metriken
Source Base Score Exploit Score Impact Score Vector string
nvd@nist.gov 7.8 1.8 5.9
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
nvd@nist.gov 7.2 3.9 10
AV:L/AC:L/Au:N/C:C/I:C/A:C