CVE-2017-3756
First published: Fri Aug 18 2017(Updated: )
A privilege escalation vulnerability was identified in Lenovo Active Protection System for ThinkPad systems versions earlier than 1.82.0.17. An attacker with local privileges could execute code with administrative privileges via an unquoted service path.
Credit: psirt@lenovo.com
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Lenovo ThinkPad 10 Ella 2 BIOS | ||
| Lenovo ThinkPad Yoga 11e Beema BIOS | ||
| Lenovo ThinkPad Yoga 11e Braswell | ||
| Lenovo ThinkPad 11e Broadwell BIOS | ||
| Lenovo ThinkPad Yoga 11e Skylake BIOS | ||
| Lenovo ThinkPad 13e BIOS | ||
| Lenovo ThinkPad E450 BIOS | ||
| Lenovo ThinkPad E450 BIOS | ||
| Lenovo ThinkPad E455 BIOS | ||
| Lenovo ThinkPad E460 BIOS | ||
| Lenovo ThinkPad E465 BIOS | ||
| Lenovo ThinkPad E550 BIOS | ||
| Lenovo ThinkPad E550c BIOS | ||
| Lenovo ThinkPad E555 BIOS | ||
| Lenovo ThinkPad BIOS | ||
| Lenovo ThinkPad E565 BIOS | ||
| lenovo ThinkPad edge e440 | ||
| Lenovo ThinkPad Edge E445 | ||
| Lenovo ThinkPad Edge E540 BIOS | ||
| Lenovo ThinkPad Edge E545 BIOS | ||
| Lenovo ThinkPad Helix 20CG BIOS | ||
| Lenovo ThinkPad Helix 20CH BIOS | ||
| Lenovo ThinkPad L440 | ||
| Lenovo ThinkPad L450 BIOS | ||
| Lenovo ThinkPad L460 | ||
| Lenovo ThinkPad L540 | ||
| Lenovo ThinkPad L560 BIOS | ||
| Lenovo ThinkPad P50s BIOS | ||
| Lenovo ThinkPad P50s BIOS | ||
| Lenovo ThinkPad P70 BIOS | ||
| Lenovo ThinkPad S1 Yoga 12 BIOS | ||
| Lenovo ThinkPad S1 Yoga Non-VPro BIOS | ||
| Lenovo ThinkPad S1 Yoga BIOS | ||
| Lenovo ThinkPad S3 S440 BIOS | ||
| Lenovo ThinkPad Yoga 14 BIOS | ||
| Lenovo ThinkPad S5 E560P | ||
| Lenovo ThinkPad S5 Yoga 15 BIOS | ||
| Lenovo ThinkPad S540 BIOS | ||
| Lenovo ThinkPad T440p BIOS | ||
| Lenovo ThinkPad T440p | ||
| Lenovo ThinkPad T440s BIOS | ||
| Lenovo ThinkPad T440u BIOS | ||
| Lenovo ThinkPad T450 BIOS | ||
| Lenovo ThinkPad T450s BIOS | ||
| Lenovo ThinkPad T460 BIOS | ||
| Lenovo ThinkPad T460p BIOS | ||
| Lenovo ThinkPad T460s BIOS | ||
| Lenovo ThinkPad T540p BIOS | ||
| Lenovo ThinkPad T540p BIOS | ||
| Lenovo ThinkPad T550 BIOS | ||
| Lenovo ThinkPad T560 BIOS | ||
| Lenovo ThinkPad Tablet 10 BIOS | ||
| Lenovo ThinkPad Tablet 8 BIOS | ||
| Lenovo ThinkPad W540 | ||
| Lenovo ThinkPad W541 Firmware | ||
| Lenovo ThinkPad W550s firmware | ||
| Lenovo ThinkPad X1 Carbon BIOS | ||
| Lenovo ThinkPad X1 Carbon BIOS | ||
| Lenovo ThinkPad X1 Carbon BIOS | ||
| Lenovo ThinkPad X1 Tablet BIOS | ||
| Lenovo ThinkPad X1 Yoga | ||
| Lenovo ThinkPad x140e | ||
| Lenovo ThinkPad x240s BIOS | ||
| Lenovo ThinkPad x240s firmware | ||
| Lenovo ThinkPad X250 Shark Bay BIOS | ||
| Lenovo ThinkPad x250 Shark Bay BIOS | ||
| Lenovo ThinkPad x260 BIOS | ||
| Lenovo ThinkPad 11e Beema BIOS | ||
| Lenovo ThinkPad 11e Beema BIOS | ||
| Lenovo ThinkPad Yoga 11e Braswell BIOS | ||
| Lenovo ThinkPad Yoga 11e Broadwell BIOS | ||
| Lenovo ThinkPad Yoga 11e Skylake BIOS | ||
| Lenovo ThinkPad Yoga 14 (460) S3 BIOS | ||
| Lenovo ThinkPad Yoga 260 S1 BIOS | ||
| Lenovo ThinkPad 10 Ella 2 BIOS | ||
| Lenovo ThinkPad 11e | ||
| Lenovo ThinkPad 11e | ||
| Lenovo ThinkPad 11e Broadwell BIOS | ||
| Lenovo ThinkPad 11e | ||
| lenovo ThinkPad 13e BIOS | ||
| Lenovo ThinkPad E450 BIOS | ||
| Lenovo ThinkPad E450c | ||
| Lenovo ThinkPad E455 Firmware | ||
| Lenovo ThinkPad E460 Firmware | ||
| Lenovo ThinkPad E465 BIOS | ||
| Lenovo ThinkPad E550 BIOS | ||
| Lenovo ThinkPad E550c BIOS | ||
| Lenovo ThinkPad E555 Firmware | ||
| Lenovo ThinkPad E560 Firmware | ||
| Lenovo ThinkPad E565 BIOS | ||
| Lenovo ThinkPad Edge E440 | ||
| Lenovo ThinkPad Edge E445 | ||
| Lenovo ThinkPad Edge E540 BIOS | ||
| Lenovo ThinkPad Edge E545 BIOS | ||
| Lenovo ThinkPad Helix 20CG BIOS | ||
| Lenovo ThinkPad Helix 20CH BIOS | ||
| Lenovo ThinkPad L440 | ||
| Lenovo ThinkPad L450 | ||
| Lenovo ThinkPad L460 Firmware | ||
| Lenovo ThinkPad L540 BIOS | ||
| Lenovo ThinkPad L560 Firmware | ||
| Lenovo ThinkPad P50 Firmware | ||
| Lenovo ThinkPad P50s BIOS | ||
| Lenovo ThinkPad P70 BIOS | ||
| Lenovo ThinkPad S1 Yoga 12 BIOS | ||
| Lenovo ThinkPad S1 Yoga | ||
| Lenovo ThinkPad S1 Yoga VPro Firmware | ||
| Lenovo ThinkPad S3 S440 BIOS | ||
| Lenovo ThinkPad Yoga 14 (460) S3 BIOS | ||
| Lenovo ThinkPad E560p | ||
| Lenovo ThinkPad S5 Yoga 15 Firmware | ||
| Lenovo ThinkPad S540 BIOS | ||
| Lenovo ThinkPad T440 | ||
| Lenovo ThinkPad T440p Firmware | ||
| Lenovo ThinkPad T440s Firmware | ||
| Lenovo ThinkPad T440u | ||
| Lenovo ThinkPad T450 Firmware | ||
| Lenovo ThinkPad T450s Firmware | ||
| Lenovo ThinkPad T460 firmware | ||
| Lenovo ThinkPad T460p BIOS | ||
| Lenovo ThinkPad T460s Firmware | ||
| Lenovo ThinkPad T540p Firmware | ||
| Lenovo ThinkPad T540p Firmware | ||
| Lenovo ThinkPad T550 | ||
| Lenovo ThinkPad T560 Firmware | ||
| Lenovo ThinkPad Tablet 10 Firmware | ||
| Lenovo ThinkPad Tablet 8 Firmware | ||
| Lenovo ThinkPad W540 Firmware | ||
| Lenovo ThinkPad W541 Firmware | ||
| Lenovo ThinkPad W550s firmware | ||
| Lenovo ThinkPad X1 Carbon | ||
| Lenovo ThinkPad X1 Carbon (20AX) | ||
| Lenovo ThinkPad X1 Carbon (20BX) Firmware | ||
| Lenovo ThinkPad X1 Tablet | ||
| Lenovo ThinkPad X1 Yoga | ||
| Lenovo ThinkPad x140e | ||
| Lenovo ThinkPad x240 firmware | ||
| Lenovo ThinkPad x240s BIOS | ||
| Lenovo ThinkPad x250 Broadwell BIOS | ||
| Lenovo ThinkPad x250 Shark Bay BIOS | ||
| Lenovo ThinkPad x260 firmware | ||
| Lenovo ThinkPad 11e YOGA | ||
| Lenovo ThinkPad 11e Beema BIOS | ||
| Lenovo ThinkPad Yoga 11e Braswell BIOS | ||
| Lenovo ThinkPad Yoga 11e Broadwell BIOS | ||
| Lenovo ThinkPad Yoga 11e Skylake | ||
| Lenovo ThinkPad Yoga 14 (460) S3 BIOS | ||
| Lenovo ThinkPad Yoga 260 S1 BIOS | ||
| Windows 10 | ||
| Microsoft Windows 7 | ||
| Microsoft Windows |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
Frequently Asked Questions
What is the severity of CVE-2017-3756?
CVE-2017-3756 has a CVSS score of 7.8, indicating a high severity level for privilege escalation.
How do I fix CVE-2017-3756?
To fix CVE-2017-3756, update the Lenovo Active Protection System to version 1.82.0.17 or later.
What systems are affected by CVE-2017-3756?
CVE-2017-3756 affects various Lenovo ThinkPad systems running versions of Lenovo Active Protection System prior to 1.82.0.17.
Can CVE-2017-3756 be exploited remotely?
CVE-2017-3756 requires local access to the affected systems for exploitation, thus is not remotely exploitable.
What type of vulnerability is represented by CVE-2017-3756?
CVE-2017-3756 represents a privilege escalation vulnerability that allows users with local access to execute code with elevated privileges.
- agent/references
- agent/type
- collector/mitre-cve
- source/MITRE
- agent/author
- agent/severity
- agent/last-modified-date
- agent/description
- agent/event
- agent/first-publish-date
- agent/source
- agent/softwarecombine
- agent/tags
- collector/nvd-index
- agent/software-canonical-lookup-request
- vendor/lenovo
- canonical/lenovo thinkpad 10 ella 2 bios
- canonical/lenovo thinkpad yoga 11e beema bios
- canonical/lenovo thinkpad yoga 11e braswell
- canonical/lenovo thinkpad 11e broadwell bios
- canonical/lenovo thinkpad yoga 11e skylake bios
- canonical/lenovo thinkpad 13e bios
- canonical/lenovo thinkpad e450 bios
- canonical/lenovo thinkpad e455 bios
- canonical/lenovo thinkpad e460 bios
- canonical/lenovo thinkpad e465 bios
- canonical/lenovo thinkpad e550 bios
- canonical/lenovo thinkpad e550c bios
- canonical/lenovo thinkpad e555 bios
- canonical/lenovo thinkpad bios
- canonical/lenovo thinkpad e565 bios
- canonical/lenovo thinkpad edge e440
- canonical/lenovo thinkpad edge e445
- canonical/lenovo thinkpad edge e540 bios
- canonical/lenovo thinkpad edge e545 bios
- canonical/lenovo thinkpad helix 20cg bios
- canonical/lenovo thinkpad helix 20ch bios
- canonical/lenovo thinkpad l440
- canonical/lenovo thinkpad l450 bios
- canonical/lenovo thinkpad l460
- canonical/lenovo thinkpad l540
- canonical/lenovo thinkpad l560 bios
- canonical/lenovo thinkpad p50s bios
- canonical/lenovo thinkpad p70 bios
- canonical/lenovo thinkpad s1 yoga 12 bios
- canonical/lenovo thinkpad s1 yoga non-vpro bios
- canonical/lenovo thinkpad s1 yoga bios
- canonical/lenovo thinkpad s3 s440 bios
- canonical/lenovo thinkpad yoga 14 bios
- canonical/lenovo thinkpad s5 e560p
- canonical/lenovo thinkpad s5 yoga 15 bios
- canonical/lenovo thinkpad s540 bios
- canonical/lenovo thinkpad t440p bios
- canonical/lenovo thinkpad t440p
- canonical/lenovo thinkpad t440s bios
- canonical/lenovo thinkpad t440u bios
- canonical/lenovo thinkpad t450 bios
- canonical/lenovo thinkpad t450s bios
- canonical/lenovo thinkpad t460 bios
- canonical/lenovo thinkpad t460p bios
- canonical/lenovo thinkpad t460s bios
- canonical/lenovo thinkpad t540p bios
- canonical/lenovo thinkpad t550 bios
- canonical/lenovo thinkpad t560 bios
- canonical/lenovo thinkpad tablet 10 bios
- canonical/lenovo thinkpad tablet 8 bios
- canonical/lenovo thinkpad w540
- canonical/lenovo thinkpad w541 firmware
- canonical/lenovo thinkpad w550s firmware
- canonical/lenovo thinkpad x1 carbon bios
- canonical/lenovo thinkpad x1 tablet bios
- canonical/lenovo thinkpad x1 yoga
- canonical/lenovo thinkpad x140e
- canonical/lenovo thinkpad x240s bios
- canonical/lenovo thinkpad x240s firmware
- canonical/lenovo thinkpad x250 shark bay bios
- canonical/lenovo thinkpad x260 bios
- canonical/lenovo thinkpad 11e beema bios
- canonical/lenovo thinkpad yoga 11e braswell bios
- canonical/lenovo thinkpad yoga 11e broadwell bios
- canonical/lenovo thinkpad yoga 14 (460) s3 bios
- canonical/lenovo thinkpad yoga 260 s1 bios
- canonical/lenovo thinkpad 11e
- canonical/lenovo thinkpad e450c
- canonical/lenovo thinkpad e455 firmware
- canonical/lenovo thinkpad e460 firmware
- canonical/lenovo thinkpad e555 firmware
- canonical/lenovo thinkpad e560 firmware
- canonical/lenovo thinkpad l450
- canonical/lenovo thinkpad l460 firmware
- canonical/lenovo thinkpad l540 bios
- canonical/lenovo thinkpad l560 firmware
- canonical/lenovo thinkpad p50 firmware
- canonical/lenovo thinkpad s1 yoga
- canonical/lenovo thinkpad s1 yoga vpro firmware
- canonical/lenovo thinkpad e560p
- canonical/lenovo thinkpad s5 yoga 15 firmware
- canonical/lenovo thinkpad t440
- canonical/lenovo thinkpad t440p firmware
- canonical/lenovo thinkpad t440s firmware
- canonical/lenovo thinkpad t440u
- canonical/lenovo thinkpad t450 firmware
- canonical/lenovo thinkpad t450s firmware
- canonical/lenovo thinkpad t460 firmware
- canonical/lenovo thinkpad t460s firmware
- canonical/lenovo thinkpad t540p firmware
- canonical/lenovo thinkpad t550
- canonical/lenovo thinkpad t560 firmware
- canonical/lenovo thinkpad tablet 10 firmware
- canonical/lenovo thinkpad tablet 8 firmware
- canonical/lenovo thinkpad w540 firmware
- canonical/lenovo thinkpad x1 carbon
- canonical/lenovo thinkpad x1 carbon (20ax)
- canonical/lenovo thinkpad x1 carbon (20bx) firmware
- canonical/lenovo thinkpad x1 tablet
- canonical/lenovo thinkpad x240 firmware
- canonical/lenovo thinkpad x250 broadwell bios
- canonical/lenovo thinkpad x260 firmware
- canonical/lenovo thinkpad 11e yoga
- canonical/lenovo thinkpad yoga 11e skylake
- vendor/microsoft
- canonical/windows 10
- canonical/microsoft windows 7
- canonical/microsoft windows