PT-2019-9204 · Synaptics+1 · Synaptics Pointing Device Driver+1

Publicado 2019-01-24 · Atualizado 2019-05-08 · CVE-2018-16098

Positive Technologies (AI Summary)

CVSS v3.1

7.8

Alta

Vetor base

AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Lenovo ThinkPads (affected versions not specified)

Description An unquoted search path issue was discovered in the Synaptics Pointing Device driver of certain Lenovo ThinkPads, potentially allowing unauthorized code execution with low privilege user rights.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Enumeração de Fraquezas

CWE-428

Identificadores relacionados

CVE-2018-16098

Produtos afetados

Lenovo Thinkpad

Synaptics Pointing Device Driver

Referências · 4

• https://support.lenovo.com/bg/en/product_security/len-24573 · Aviso do Fabricante
• https://nvd.nist.gov/vuln/detail/CVE-2018-16098 · Nota de Segurança
• https://support.lenovo.com/us/en/solutions/LEN-24573 · Nota
• https://osv.dev/vulnerability/CVE-2018-16098 · Aviso do Fabricante