CVE-2017-3756: High severity lenovo thinkpad 10 ella 2 bios vulnerability
Published Aug 18, 2017
·Updated
A privilege escalation vulnerability was identified in Lenovo Active Protection System for ThinkPad systems versions earlier than 1.82.0.17. An attacker with local privileges could execute code with administrative privileges via an unquoted service path.
Affected Software
151 affected components
Lenovo Thinkpad 10 Ella 2 Bios
Lenovo Thinkpad 11e Beema Bios
Lenovo Thinkpad 11e Braswell Bios
Lenovo Thinkpad 11e Broadwell Bios
Lenovo Thinkpad 11e Skylake Bios
Lenovo Thinkpad 13e Bios
Lenovo Thinkpad E450 Bios
Lenovo Thinkpad E450c Bios
Lenovo Thinkpad E455 Bios
Lenovo Thinkpad E460 Bios
Lenovo Thinkpad E465 Bios
Lenovo Thinkpad E550 Bios
Lenovo Thinkpad E550c Bios
Lenovo Thinkpad E555 Bios
Lenovo Thinkpad E560 Bios
Lenovo Thinkpad E565 Bios
Lenovo Thinkpad Edge E440 Bios
Lenovo Thinkpad Edge E445 Bios
Lenovo Thinkpad Edge E540 Bios
Lenovo Thinkpad Edge E545 Bios
Lenovo Thinkpad Helix 20cg Bios
Lenovo Thinkpad Helix 20ch Bios
Lenovo Thinkpad L440 Bios
Lenovo Thinkpad L450 Bios
Lenovo Thinkpad L460 Bios
Lenovo Thinkpad L540 Bios
Lenovo Thinkpad L560 Bios
Lenovo Thinkpad P50 Bios
Lenovo Thinkpad P50s Bios
Lenovo Thinkpad P70 Bios
Lenovo Thinkpad S1 Yoga 12 Bios
Lenovo Thinkpad S1 Yoga Non Vpro Bios
Lenovo Thinkpad S1 Yoga Vpro Bios
Lenovo Thinkpad S3 S440 Bios
Lenovo Thinkpad S3 Yoga 14 Bios
Lenovo Thinkpad S5 E560p Bios
Lenovo Thinkpad S5 Yoga 15 Bios
Lenovo Thinkpad S540 Bios
Lenovo Thinkpad T440 Bios
Lenovo Thinkpad T440p Bios
Lenovo Thinkpad T440s Bios
Lenovo Thinkpad T440u Bios
Lenovo Thinkpad T450 Bios
Lenovo Thinkpad T450s Bios
Lenovo Thinkpad T460 Bios
Lenovo Thinkpad T460p Bios
Lenovo Thinkpad T460s Bios
Lenovo Thinkpad T540 Bios
Lenovo Thinkpad T540p Bios
Lenovo Thinkpad T550 Bios
Lenovo Thinkpad T560 Bios
Lenovo Thinkpad Tablet 10 Bios
Lenovo Thinkpad Tablet 8 Bios
Lenovo Thinkpad W540 Bios
Lenovo Thinkpad W541 Bios
Lenovo Thinkpad W550s Bios
Lenovo Thinkpad X1 Carbon 20ax Bios
Lenovo Thinkpad X1 Carbon 20bx Bios
Lenovo Thinkpad X1 Carbon Bios
Lenovo Thinkpad X1 Tablet Bios
Lenovo Thinkpad X1 Yoga Bios
Lenovo Thinkpad X140e Amd Bios
Lenovo Thinkpad X240 Bios
Lenovo Thinkpad X240s Bios
Lenovo Thinkpad X250 Broadwell Bios
Lenovo Thinkpad X250 Sharkbay Bios
Lenovo Thinkpad X260 Bios
Lenovo Thinkpad Yoga 11e Beema Bios
Lenovo Thinkpad Yoga 11e Bios
Lenovo Thinkpad Yoga 11e Braswell Bios
Lenovo Thinkpad Yoga 11e Broadwell Bios
Lenovo Thinkpad Yoga 11e Skylake Bios
Lenovo Thinkpad Yoga 14 460 S3 Bios
Lenovo Thinkpad Yoga 260 S1 Bios
Lenovo Thinkpad 10 Ella 2
Lenovo Thinkpad 11e Beema
Lenovo Thinkpad 11e Braswell
Lenovo Thinkpad 11e Broadwell
Lenovo Thinkpad 11e Skylake
Lenovo Thinkpad 13e
Lenovo Thinkpad E450
Lenovo Thinkpad E450c
Lenovo Thinkpad E455
Lenovo Thinkpad E460
Lenovo Thinkpad E465
Lenovo Thinkpad E550
Lenovo Thinkpad E550c
Lenovo Thinkpad E555
Lenovo Thinkpad E560
Lenovo Thinkpad E565
Lenovo Thinkpad Edge E440
Lenovo Thinkpad Edge E445
Lenovo Thinkpad Edge E540
Lenovo Thinkpad Edge E545
Lenovo Thinkpad Helix 20cg
Lenovo Thinkpad Helix 20ch
Lenovo Thinkpad L440
Lenovo Thinkpad L450
Lenovo Thinkpad L460
Lenovo Thinkpad L540
Lenovo Thinkpad L560
Lenovo Thinkpad P50
Lenovo Thinkpad P50s
Lenovo Thinkpad P70
Lenovo Thinkpad S1 Yoga 12
Lenovo Thinkpad S1 Yoga Non Vpro
Lenovo Thinkpad S1 Yoga Vpro
Lenovo Thinkpad S3 S440
Lenovo Thinkpad S3 Yoga 14
Lenovo Thinkpad S5 E560p
Lenovo Thinkpad S5 Yoga 15
Lenovo Thinkpad S540
Lenovo Thinkpad T440
Lenovo Thinkpad T440p
Lenovo Thinkpad T440s
Lenovo Thinkpad T440u
Lenovo Thinkpad T450
Lenovo Thinkpad T450s
Lenovo ThinkPad T460
Lenovo ThinkPad T460p
Lenovo Thinkpad T460s
Lenovo Thinkpad T540
Lenovo Thinkpad T540p
Lenovo Thinkpad T550
Lenovo Thinkpad T560
Lenovo Thinkpad Tablet 10
Lenovo Thinkpad Tablet 8
Lenovo Thinkpad W540
Lenovo Thinkpad W541
Lenovo Thinkpad W550s
Lenovo ThinkPad X1 Carbon
Lenovo Thinkpad X1 Carbon 20ax
Lenovo Thinkpad X1 Carbon 20bx
Lenovo Thinkpad X1 Tablet
Lenovo Thinkpad X1 Yoga
Lenovo Thinkpad X140e Amd
Lenovo Thinkpad X240
Lenovo Thinkpad X240s
Lenovo Thinkpad X250 Broadwell
Lenovo Thinkpad X250 Sharkbay
Lenovo Thinkpad X260
Lenovo Thinkpad Yoga 11e
Lenovo Thinkpad Yoga 11e Beema
Lenovo Thinkpad Yoga 11e Braswell
Lenovo Thinkpad Yoga 11e Broadwell
Lenovo Thinkpad Yoga 11e Skylake
Lenovo Thinkpad Yoga 14 460 S3
Lenovo Thinkpad Yoga 260 S1
Microsoft Windows 10
Microsoft Windows 7
Microsoft Windows 8.1
Event History
Aug 18, 2017
CVE Published
via MITRE·07:00 PM
Data Sourced
via MITRE·07:00 PM
DescriptionWeakness
Frequently Asked Questions
1
What is the severity of CVE-2017-3756?
CVE-2017-3756 has a CVSS score of 7.8, indicating a high severity level for privilege escalation.
2
How do I fix CVE-2017-3756?
To fix CVE-2017-3756, update the Lenovo Active Protection System to version 1.82.0.17 or later.
3
What systems are affected by CVE-2017-3756?
CVE-2017-3756 affects various Lenovo ThinkPad systems running versions of Lenovo Active Protection System prior to 1.82.0.17.
4
Can CVE-2017-3756 be exploited remotely?
CVE-2017-3756 requires local access to the affected systems for exploitation, thus is not remotely exploitable.
5
What type of vulnerability is represented by CVE-2017-3756?
CVE-2017-3756 represents a privilege escalation vulnerability that allows users with local access to execute code with elevated privileges.