PT-2017-16074 · Lenovo · Lenovo Active Protection System

Published 2017-06-03 · Updated 2019-10-03 · CVE-2017-3740

Positive Technologies (AI Summary)

CVSS v3.1

5.5

Medium

Base vector

AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions Lenovo Active Protection System versions prior to 1.82.0.14

Description The issue allows an attacker with local privileges to send commands to the system's embedded controller. This could result in a denial of service attack on the system or the ability to alter hardware functionality.

Recommendations For versions prior to 1.82.0.14, update to version 1.82.0.14 or later to resolve the issue.

Fix

Related Identifiers

CVE-2017-3740

Affected Products

Lenovo Active Protection System

References · 3

• https://support.lenovo.com/us/en/product_security/LEN-13637 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2017-3740 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2017-3740 · Security Note