PT-2017-16084 · Lenovo · Thinkpad Compact Usb Keyboard With Trackpoint

Publicado 2017-08-10 · Atualizado 2017-08-24 · CVE-2017-3751

Positive Technologies (AI Summary)

CVSS v2.0

7.2

Alta

Vetor base

AV:L/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions ThinkPad Compact USB Keyboard with TrackPoint versions earlier than 1.5.5.0

Description An unquoted service path issue was identified in the driver, which could allow an attacker with local privileges to execute code with administrative privileges.

Recommendations For versions earlier than 1.5.5.0, update to version 1.5.5.0 or later to resolve the issue.

Correção

Enumeração de Fraquezas

CWE-428

Identificadores relacionados

CVE-2017-3751

Produtos afetados

Thinkpad Compact Usb Keyboard With Trackpoint

Referências · 2

• https://support.lenovo.com/us/en/product_security/LEN-15061 · Aviso do Fabricante
• https://nvd.nist.gov/vuln/detail/CVE-2017-3751 · Nota de Segurança