PT-2017-16087 · Lenovo · Lenovo Active Protection System

Publicado 2017-08-18 · Atualizado 2019-10-03 · CVE-2017-3756

Positive Technologies (AI Summary)

CVSS v2.0

7.2

Alta

Vetor base

AV:L/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Lenovo Active Protection System for ThinkPad systems versions earlier than 1.82.0.17

Description A privilege escalation issue was identified, allowing an attacker with local privileges to execute code with administrative privileges via an unquoted service path.

Recommendations For versions earlier than 1.82.0.17, update to version 1.82.0.17 or later to resolve the issue.

Correção

Identificadores relacionados

CVE-2017-3756

Produtos afetados

Lenovo Active Protection System

Referências · 3

• http://securityfocus.com/bid/100305 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2017-3756 · Nota de Segurança
• https://support.lenovo.com/us/en/product_security/LEN-15765 · Aviso do Fabricante