PT-2017-16075 · Lenovo · Lenovo Power Management Driver+1

Published 2017-06-03 · Updated 2019-10-03 · CVE-2017-3741

Positive Technologies (AI Summary)

CVSS v3.1

3.3

Low

Base vector

AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N

Name of the Vulnerable Software and Affected Versions Lenovo Power Management driver versions prior to 1.67.12.24

Description A local user may alter the trackpoint's firmware, causing it to malfunction. This issue is specific to ThinkPad X1 Carbon 5th generation devices.

Recommendations For versions prior to 1.67.12.24, update the Lenovo Power Management driver to version 1.67.12.24 or later to resolve the issue.

Fix

Related Identifiers

CVE-2017-3741

Affected Products

Lenovo Power Management Driver

Thinkpad X1 Carbon

References · 3

• https://osv.dev/vulnerability/CVE-2017-3741 · Vendor Advisory
• https://support.lenovo.com/us/en/product_security/LEN-14440 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2017-3741 · Security Note