CVE-2017-3757

An unquoted service path vulnerability was identified in the driver for the ElanTech Touchpad, various versions, used on some Lenovo brand notebooks (not ThinkPads). This could allow an attacker with local privileges to execute code with administrative privileges.

Score

CVSS 3.0 7.8 High

Status

Modified - psirt@lenovo.com

Published

2017-08-29

Last modified

2024-09-16

Weaknesses

CWE-428

Affected products

• Elan Touchpad Driver (Emc)
• Lenovo Elantech Touchpad Driver (Lenovo Group Ltd.)

References

• https://support.lenovo.com/us/en/product_security/LEN-14390