CVE-2017-3756

Summary

A privilege escalation vulnerability was identified in Lenovo Active Protection System for ThinkPad systems versions earlier than 1.82.0.17. An attacker with local privileges could execute code with administrative privileges via an unquoted service path.

Affected Software

VendorProductVersion RangeStatus
Lenovo Group Ltd.ThinkPad Active Protection SystemEarlier than 1.82.0.17affected

Weaknesses

  • Privilege Escalation

ADP Enrichment

CVE Program Container

Additional References

References