VULNERABILITY INTELLIGENCE
CVE-2017-3751
CVSS score7.8 HIGH
EPSS probability0.37%
CISA KEVNot currently listed
Published2017-08-10
Last modified2026-06-17
CVSS vectorCVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Description
An unquoted service path vulnerability was identified in the driver for the ThinkPad Compact USB Keyboard with TrackPoint versions earlier than 1.5.5.0. This could allow an attacker with local privileges to execute code with administrative privileges.
Weakness classification
- CWE-428: Unquoted Search Path or Element
Primary references
- psirt@lenovo.com — Patch, Vendor Advisory
- af854a3a-2127-422b-91ae-364da2661108 — Patch, Vendor Advisory