PT-2017-16087 · Lenovo · Lenovo Active Protection System

Published 2017-08-18 · Updated 2019-10-03 · CVE-2017-3756

Positive Technologies (AI Summary)

CVSS v2.0

7.2

High

Base vector

AV:L/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Lenovo Active Protection System for ThinkPad systems versions earlier than 1.82.0.17

Description A privilege escalation issue was identified, allowing an attacker with local privileges to execute code with administrative privileges via an unquoted service path.

Recommendations For versions earlier than 1.82.0.17, update to version 1.82.0.17 or later to resolve the issue.

Fix

Related Identifiers

CVE-2017-3756

Affected Products

Lenovo Active Protection System

References · 3

• https://nvd.nist.gov/vuln/detail/CVE-2017-3756 · Security Note
• https://support.lenovo.com/us/en/product_security/LEN-15765 · Vendor Advisory
• http://securityfocus.com/bid/100305 · Note