HIGH🇵🇱 Wersja polska

CVE-2017-3756

CVSS 7.8v3.0pub. 2017-08-18upd. 2026-05-13

A privilege escalation vulnerability was identified in Lenovo Active Protection System for ThinkPad systems versions earlier than 1.82.0.17. An attacker with local privileges could execute code with administrative privileges via an unquoted service path.

CVSS Vector
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

  • Lenovo Thinkpad 10 Ella 2

    HW
    Lenovo
    all versions

  • Lenovo Thinkpad 10 Ella 2 Bios

    OS
    Lenovo
    all versions

  • Lenovo Thinkpad 11e Beema

    HW
    Lenovo
    all versions

  • Lenovo Thinkpad 11e Beema Bios

    OS
    Lenovo
    all versions

  • Lenovo Thinkpad 11e Braswell

    HW
    Lenovo
    all versions

  • Lenovo Thinkpad 11e Braswell Bios

    OS
    Lenovo
    all versions

  • Lenovo Thinkpad 11e Broadwell

    HW
    Lenovo
    all versions

  • Lenovo Thinkpad 11e Broadwell Bios

    OS
    Lenovo
    all versions

  • Lenovo Thinkpad 11e Skylake

    HW
    Lenovo
    all versions

  • Lenovo Thinkpad 11e Skylake Bios

    OS
    Lenovo
    all versions

  • Lenovo Thinkpad 13e

    HW
    Lenovo
    all versions

  • Lenovo Thinkpad 13e Bios

    OS
    Lenovo
    all versions

  • Lenovo Thinkpad E450

    HW
    Lenovo
    all versions

  • Lenovo Thinkpad E450 Bios

    OS
    Lenovo
    all versions

  • Lenovo Thinkpad E450c

    HW
    Lenovo
    all versions

  • Lenovo Thinkpad E450c Bios

    OS
    Lenovo
    all versions

  • Lenovo Thinkpad E455

    HW
    Lenovo
    all versions

  • Lenovo Thinkpad E455 Bios

    OS
    Lenovo
    all versions

  • Lenovo Thinkpad E460

    HW
    Lenovo
    all versions

  • Lenovo Thinkpad E460 Bios

    OS
    Lenovo
    all versions

  • Lenovo Thinkpad E465

    HW
    Lenovo
    all versions

  • Lenovo Thinkpad E465 Bios

    OS
    Lenovo
    all versions

  • Lenovo Thinkpad E550

    HW
    Lenovo
    all versions

  • Lenovo Thinkpad E550 Bios

    OS
    Lenovo
    all versions

  • Lenovo Thinkpad E550c

    HW
    Lenovo
    all versions

  • Lenovo Thinkpad E550c Bios

    OS
    Lenovo
    all versions

  • Lenovo Thinkpad E555

    HW
    Lenovo
    all versions

  • Lenovo Thinkpad E555 Bios

    OS
    Lenovo
    all versions

  • Lenovo Thinkpad E560

    HW
    Lenovo
    all versions

  • Lenovo Thinkpad E560 Bios

    OS
    Lenovo
    all versions
🔵
CHECK WITH VENDOR
No clear patch data available. Check vendor references.
Tags
LPE
CWE
References

Related vulnerabilities

CVE-2017-3767HIGH7.8same product

A local privilege escalation vulnerability was identified in the Realtek audio driver versions prior to 6.0.1....

CVE-2020-8320MEDIUM6.4same product

An internal shell was included in BIOS image in some ThinkPad models that could allow escalation of privilege.

CVE-2020-8337MEDIUM6.7same product

An unquoted search path vulnerability was reported in versions prior to 1.0.83.0 of the Synaptics Smart Audio ...

CVE-2016-8222MEDIUM4.4same product

A vulnerability has been identified in a signed kernel driver for the BIOS of some ThinkPad systems that can a...

CVE-2017-5638CRITICAL9.8⚠ KEVPL ✓same vendor

RCE w Apache Struts 2 poprzez błędną obsługę nagłówków HTTP (Jakarta Multipart parser)