CVE-2017-3751
An unquoted service path vulnerability was identified in the driver for the ThinkPad Compact USB Keyboard with TrackPoint versions earlier than 1.5.5.0. This could allow an attacker with local privileges to execute code with administrative privileges.
- Score
- CVSS 3.0 7.8 High
- Status
- Modified - psirt@lenovo.com
- Published
- 2017-08-10
- Last modified
- 2024-09-16
- Weaknesses
- CWE-428
Affected products
- Thinkpad Compact Usb Keyboard Driver (Lenovo)
- Thinkpad Compact Usb Keyboard With Trackpoint Driver (Lenovo Group Ltd.)
References
- https://support.lenovo.com/us/en/product_security/LEN-15061