VULNERABILITY INTELLIGENCE

CVE-2017-3757

CVSS score7.8 HIGH
EPSS probability0.37%
CISA KEVNot currently listed
Published2017-08-29
Last modified2026-06-17
CVSS vectorCVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Description

An unquoted service path vulnerability was identified in the driver for the ElanTech Touchpad, various versions, used on some Lenovo brand notebooks (not ThinkPads). This could allow an attacker with local privileges to execute code with administrative privileges.

Weakness classification

  • CWE-428: Unquoted Search Path or Element

Primary references