Details of VAR-201708-0549

ID

VAR-201708-0549

CVE

CVE-2017-3756

TITLE

plural Lenovo ThinkPad Vulnerabilities related to authorization, authority, and access control in products

Trust: 0.8

sources: JVNDB: JVNDB-2017-007637

DESCRIPTION

A privilege escalation vulnerability was identified in Lenovo Active Protection System for ThinkPad systems versions earlier than 1.82.0.17. An attacker with local privileges could execute code with administrative privileges via an unquoted service path. plural Lenovo ThinkPad The product contains vulnerabilities related to authorization, permissions, and access control.Information is obtained, information is altered, and service operation is disrupted (DoS) There is a possibility of being put into a state. Lenovo Active Protection System is prone to a local privilege-escalation vulnerability. Lenovo Thinkpad for Windows is a Windows-based portable computer owned by China Lenovo (Lenovo). Active Protection System is an autonomous feature designed to protect hard drives from damage caused by strong physical shocks and vibrations

Trust: 1.98

sources: NVD: CVE-2017-3756 // JVNDB: JVNDB-2017-007637 // BID: 100305 // VULHUB: VHN-111959

AFFECTED PRODUCTS

vendor:	lenovo	model:	thinkpad yoga 11e	scope:	-	version:	-	Trust: 4.0
vendor:	lenovo	model:	thinkpad yoga 11e bios	scope:	-	version:	-	Trust: 4.0
vendor:	lenovo	model:	thinkpad 11e	scope:	-	version:	-	Trust: 3.2
vendor:	lenovo	model:	thinkpad 11e bios	scope:	-	version:	-	Trust: 3.2
vendor:	lenovo	model:	thinkpad x1 carbon	scope:	-	version:	-	Trust: 2.4
vendor:	lenovo	model:	thinkpad x1 carbon bios	scope:	-	version:	-	Trust: 2.4
vendor:	lenovo	model:	thinkpad s1 yoga	scope:	-	version:	-	Trust: 1.6
vendor:	lenovo	model:	thinkpad s1 yoga bios	scope:	-	version:	-	Trust: 1.6
vendor:	lenovo	model:	thinkpad x250	scope:	-	version:	-	Trust: 1.6
vendor:	lenovo	model:	thinkpad x250 bios	scope:	-	version:	-	Trust: 1.6
vendor:	lenovo	model:	thinkpad 11e braswell bios	scope:	eq	version:	-	Trust: 1.6
vendor:	lenovo	model:	thinkpad 13e bios	scope:	eq	version:	-	Trust: 1.6
vendor:	lenovo	model:	thinkpad 10 ella 2 bios	scope:	eq	version:	-	Trust: 1.6
vendor:	lenovo	model:	thinkpad e450c bios	scope:	eq	version:	-	Trust: 1.6
vendor:	lenovo	model:	thinkpad 11e broadwell bios	scope:	eq	version:	-	Trust: 1.6
vendor:	lenovo	model:	thinkpad e455 bios	scope:	eq	version:	-	Trust: 1.6
vendor:	lenovo	model:	thinkpad e450 bios	scope:	eq	version:	-	Trust: 1.6
vendor:	lenovo	model:	thinkpad 11e beema bios	scope:	eq	version:	-	Trust: 1.6
vendor:	lenovo	model:	thinkpad e460 bios	scope:	eq	version:	-	Trust: 1.6
vendor:	lenovo	model:	thinkpad 11e skylake bios	scope:	eq	version:	-	Trust: 1.6
vendor:	lenovo	model:	thinkpad t540p bios	scope:	eq	version:	-	Trust: 1.0
vendor:	lenovo	model:	thinkpad yoga 14 460 s3 bios	scope:	eq	version:	-	Trust: 1.0
vendor:	lenovo	model:	thinkpad e455	scope:	eq	version:	-	Trust: 1.0
vendor:	lenovo	model:	thinkpad e450c	scope:	eq	version:	-	Trust: 1.0
vendor:	lenovo	model:	thinkpad 10 ella 2	scope:	eq	version:	-	Trust: 1.0
vendor:	lenovo	model:	thinkpad e550	scope:	eq	version:	-	Trust: 1.0
vendor:	lenovo	model:	thinkpad edge e540 bios	scope:	eq	version:	-	Trust: 1.0
vendor:	lenovo	model:	thinkpad t450s	scope:	eq	version:	-	Trust: 1.0
vendor:	lenovo	model:	thinkpad x250 sharkbay bios	scope:	eq	version:	-	Trust: 1.0
vendor:	lenovo	model:	thinkpad 11e braswell	scope:	eq	version:	-	Trust: 1.0
vendor:	lenovo	model:	thinkpad s5 e560p	scope:	eq	version:	-	Trust: 1.0
vendor:	lenovo	model:	thinkpad s3 s440	scope:	eq	version:	-	Trust: 1.0
vendor:	lenovo	model:	thinkpad e555 bios	scope:	eq	version:	-	Trust: 1.0
vendor:	lenovo	model:	thinkpad x1 carbon	scope:	eq	version:	-	Trust: 1.0
vendor:	lenovo	model:	thinkpad s1 yoga non vpro	scope:	eq	version:	-	Trust: 1.0
vendor:	lenovo	model:	thinkpad t440s bios	scope:	eq	version:	-	Trust: 1.0
vendor:	lenovo	model:	thinkpad yoga 11e beema	scope:	eq	version:	-	Trust: 1.0
vendor:	lenovo	model:	thinkpad yoga 11e broadwell	scope:	eq	version:	-	Trust: 1.0
vendor:	lenovo	model:	thinkpad t560	scope:	eq	version:	-	Trust: 1.0
vendor:	lenovo	model:	thinkpad p70	scope:	eq	version:	-	Trust: 1.0
vendor:	lenovo	model:	thinkpad e460	scope:	eq	version:	-	Trust: 1.0
vendor:	lenovo	model:	thinkpad helix 20cg	scope:	eq	version:	-	Trust: 1.0
vendor:	lenovo	model:	thinkpad helix 20ch	scope:	eq	version:	-	Trust: 1.0
vendor:	lenovo	model:	thinkpad t440u bios	scope:	eq	version:	-	Trust: 1.0
vendor:	lenovo	model:	thinkpad yoga 11e broadwell bios	scope:	eq	version:	-	Trust: 1.0
vendor:	lenovo	model:	thinkpad e565 bios	scope:	eq	version:	-	Trust: 1.0
vendor:	lenovo	model:	thinkpad s3 s440 bios	scope:	eq	version:	-	Trust: 1.0
vendor:	lenovo	model:	thinkpad edge e540	scope:	eq	version:	-	Trust: 1.0
vendor:	lenovo	model:	thinkpad s3 yoga 14	scope:	eq	version:	-	Trust: 1.0
vendor:	lenovo	model:	thinkpad yoga 11e skylake bios	scope:	eq	version:	-	Trust: 1.0
vendor:	lenovo	model:	thinkpad s1 yoga 12	scope:	eq	version:	-	Trust: 1.0
vendor:	lenovo	model:	thinkpad x140e amd	scope:	eq	version:	-	Trust: 1.0
vendor:	lenovo	model:	thinkpad e560 bios	scope:	eq	version:	-	Trust: 1.0
vendor:	lenovo	model:	thinkpad w540	scope:	eq	version:	-	Trust: 1.0
vendor:	lenovo	model:	thinkpad x1 yoga bios	scope:	eq	version:	-	Trust: 1.0
vendor:	lenovo	model:	thinkpad e450	scope:	eq	version:	-	Trust: 1.0
vendor:	lenovo	model:	thinkpad yoga 260 s1 bios	scope:	eq	version:	-	Trust: 1.0
vendor:	lenovo	model:	thinkpad t460 bios	scope:	eq	version:	-	Trust: 1.0
vendor:	lenovo	model:	thinkpad e550c bios	scope:	eq	version:	-	Trust: 1.0
vendor:	lenovo	model:	thinkpad x1 carbon 20ax bios	scope:	eq	version:	-	Trust: 1.0
vendor:	lenovo	model:	thinkpad x240	scope:	eq	version:	-	Trust: 1.0
vendor:	lenovo	model:	thinkpad edge e440 bios	scope:	eq	version:	-	Trust: 1.0
vendor:	lenovo	model:	thinkpad l460 bios	scope:	eq	version:	-	Trust: 1.0
vendor:	lenovo	model:	thinkpad edge e445 bios	scope:	eq	version:	-	Trust: 1.0
vendor:	lenovo	model:	thinkpad x1 carbon 20bx	scope:	eq	version:	-	Trust: 1.0
vendor:	lenovo	model:	thinkpad s1 yoga vpro bios	scope:	eq	version:	-	Trust: 1.0
vendor:	lenovo	model:	thinkpad x1 tablet bios	scope:	eq	version:	-	Trust: 1.0
vendor:	lenovo	model:	thinkpad t550 bios	scope:	eq	version:	-	Trust: 1.0
vendor:	lenovo	model:	thinkpad e555	scope:	eq	version:	-	Trust: 1.0
vendor:	lenovo	model:	thinkpad t560 bios	scope:	eq	version:	-	Trust: 1.0
vendor:	lenovo	model:	thinkpad yoga 11e braswell bios	scope:	eq	version:	-	Trust: 1.0
vendor:	lenovo	model:	thinkpad s1 yoga non vpro bios	scope:	eq	version:	-	Trust: 1.0
vendor:	lenovo	model:	thinkpad e560	scope:	eq	version:	-	Trust: 1.0
vendor:	lenovo	model:	thinkpad l450	scope:	eq	version:	-	Trust: 1.0
vendor:	lenovo	model:	thinkpad p50	scope:	eq	version:	-	Trust: 1.0
vendor:	lenovo	model:	thinkpad p50 bios	scope:	eq	version:	-	Trust: 1.0
vendor:	lenovo	model:	thinkpad t450 bios	scope:	eq	version:	-	Trust: 1.0
vendor:	lenovo	model:	thinkpad t440p	scope:	eq	version:	-	Trust: 1.0
vendor:	lenovo	model:	thinkpad x260 bios	scope:	eq	version:	-	Trust: 1.0
vendor:	lenovo	model:	thinkpad 13e	scope:	eq	version:	-	Trust: 1.0
vendor:	lenovo	model:	thinkpad x240s bios	scope:	eq	version:	-	Trust: 1.0
vendor:	lenovo	model:	thinkpad t460	scope:	eq	version:	-	Trust: 1.0
vendor:	lenovo	model:	thinkpad yoga 11e beema bios	scope:	eq	version:	-	Trust: 1.0
vendor:	lenovo	model:	thinkpad 11e skylake	scope:	eq	version:	-	Trust: 1.0
vendor:	lenovo	model:	thinkpad t460s bios	scope:	eq	version:	-	Trust: 1.0
vendor:	lenovo	model:	thinkpad yoga 260 s1	scope:	eq	version:	-	Trust: 1.0
vendor:	lenovo	model:	thinkpad t440	scope:	eq	version:	-	Trust: 1.0
vendor:	lenovo	model:	thinkpad s540 bios	scope:	eq	version:	-	Trust: 1.0
vendor:	lenovo	model:	thinkpad x1 carbon bios	scope:	eq	version:	-	Trust: 1.0
vendor:	lenovo	model:	thinkpad e565	scope:	eq	version:	-	Trust: 1.0
vendor:	lenovo	model:	thinkpad x1 yoga	scope:	eq	version:	-	Trust: 1.0
vendor:	lenovo	model:	thinkpad w540 bios	scope:	eq	version:	-	Trust: 1.0
vendor:	lenovo	model:	thinkpad x1 tablet	scope:	eq	version:	-	Trust: 1.0
vendor:	lenovo	model:	thinkpad t440p bios	scope:	eq	version:	-	Trust: 1.0
vendor:	lenovo	model:	thinkpad s1 yoga 12 bios	scope:	eq	version:	-	Trust: 1.0
vendor:	lenovo	model:	thinkpad e550c	scope:	eq	version:	-	Trust: 1.0
vendor:	lenovo	model:	thinkpad x140e amd bios	scope:	eq	version:	-	Trust: 1.0
vendor:	lenovo	model:	thinkpad t440s	scope:	eq	version:	-	Trust: 1.0
vendor:	lenovo	model:	thinkpad l460	scope:	eq	version:	-	Trust: 1.0
vendor:	lenovo	model:	thinkpad t460s	scope:	eq	version:	-	Trust: 1.0
vendor:	lenovo	model:	thinkpad t440 bios	scope:	eq	version:	-	Trust: 1.0
vendor:	lenovo	model:	thinkpad t460p bios	scope:	eq	version:	-	Trust: 1.0
vendor:	lenovo	model:	thinkpad t550	scope:	eq	version:	-	Trust: 1.0
vendor:	lenovo	model:	thinkpad x240s	scope:	eq	version:	-	Trust: 1.0
vendor:	lenovo	model:	thinkpad tablet 10 bios	scope:	eq	version:	-	Trust: 1.0
vendor:	lenovo	model:	thinkpad l440	scope:	eq	version:	-	Trust: 1.0
vendor:	lenovo	model:	thinkpad t540 bios	scope:	eq	version:	-	Trust: 1.0
vendor:	lenovo	model:	thinkpad yoga 11e	scope:	eq	version:	-	Trust: 1.0
vendor:	lenovo	model:	thinkpad w550s	scope:	eq	version:	-	Trust: 1.0
vendor:	lenovo	model:	thinkpad l560	scope:	eq	version:	-	Trust: 1.0
vendor:	lenovo	model:	thinkpad 11e beema	scope:	eq	version:	-	Trust: 1.0
vendor:	lenovo	model:	thinkpad l450 bios	scope:	eq	version:	-	Trust: 1.0
vendor:	lenovo	model:	thinkpad edge e440	scope:	eq	version:	-	Trust: 1.0
vendor:	lenovo	model:	thinkpad s540	scope:	eq	version:	-	Trust: 1.0
vendor:	lenovo	model:	thinkpad p50s	scope:	eq	version:	-	Trust: 1.0
vendor:	lenovo	model:	thinkpad tablet 10	scope:	eq	version:	-	Trust: 1.0
vendor:	lenovo	model:	thinkpad l540 bios	scope:	eq	version:	-	Trust: 1.0
vendor:	lenovo	model:	thinkpad x250 sharkbay	scope:	eq	version:	-	Trust: 1.0
vendor:	lenovo	model:	thinkpad yoga 14 460 s3	scope:	eq	version:	-	Trust: 1.0
vendor:	lenovo	model:	thinkpad l560 bios	scope:	eq	version:	-	Trust: 1.0
vendor:	lenovo	model:	thinkpad s5 yoga 15 bios	scope:	eq	version:	-	Trust: 1.0
vendor:	lenovo	model:	thinkpad e465	scope:	eq	version:	-	Trust: 1.0
vendor:	lenovo	model:	thinkpad t540	scope:	eq	version:	-	Trust: 1.0
vendor:	lenovo	model:	thinkpad s3 yoga 14 bios	scope:	eq	version:	-	Trust: 1.0
vendor:	lenovo	model:	thinkpad w541 bios	scope:	eq	version:	-	Trust: 1.0
vendor:	lenovo	model:	thinkpad yoga 11e bios	scope:	eq	version:	-	Trust: 1.0
vendor:	lenovo	model:	thinkpad s1 yoga vpro	scope:	eq	version:	-	Trust: 1.0
vendor:	lenovo	model:	thinkpad l440 bios	scope:	eq	version:	-	Trust: 1.0
vendor:	lenovo	model:	thinkpad t540p	scope:	eq	version:	-	Trust: 1.0
vendor:	lenovo	model:	thinkpad t450s bios	scope:	eq	version:	-	Trust: 1.0
vendor:	lenovo	model:	thinkpad tablet 8 bios	scope:	eq	version:	-	Trust: 1.0
vendor:	lenovo	model:	thinkpad w550s bios	scope:	eq	version:	-	Trust: 1.0
vendor:	lenovo	model:	thinkpad x240 bios	scope:	eq	version:	-	Trust: 1.0
vendor:	lenovo	model:	thinkpad t440u	scope:	eq	version:	-	Trust: 1.0
vendor:	lenovo	model:	thinkpad edge e545	scope:	eq	version:	-	Trust: 1.0
vendor:	lenovo	model:	thinkpad x1 carbon 20ax	scope:	eq	version:	-	Trust: 1.0
vendor:	lenovo	model:	thinkpad tablet 8	scope:	eq	version:	-	Trust: 1.0
vendor:	lenovo	model:	thinkpad e550 bios	scope:	eq	version:	-	Trust: 1.0
vendor:	lenovo	model:	thinkpad p70 bios	scope:	eq	version:	-	Trust: 1.0
vendor:	lenovo	model:	thinkpad l540	scope:	eq	version:	-	Trust: 1.0
vendor:	lenovo	model:	thinkpad w541	scope:	eq	version:	-	Trust: 1.0
vendor:	lenovo	model:	thinkpad yoga 11e braswell	scope:	eq	version:	-	Trust: 1.0
vendor:	lenovo	model:	thinkpad edge e545 bios	scope:	eq	version:	-	Trust: 1.0
vendor:	lenovo	model:	thinkpad 11e broadwell	scope:	eq	version:	-	Trust: 1.0
vendor:	lenovo	model:	thinkpad t460p	scope:	eq	version:	-	Trust: 1.0
vendor:	lenovo	model:	thinkpad yoga 11e skylake	scope:	eq	version:	-	Trust: 1.0
vendor:	lenovo	model:	thinkpad s5 e560p bios	scope:	eq	version:	-	Trust: 1.0
vendor:	lenovo	model:	thinkpad x250 broadwell	scope:	eq	version:	-	Trust: 1.0
vendor:	lenovo	model:	thinkpad e465 bios	scope:	eq	version:	-	Trust: 1.0
vendor:	lenovo	model:	thinkpad t450	scope:	eq	version:	-	Trust: 1.0
vendor:	lenovo	model:	thinkpad edge e445	scope:	eq	version:	-	Trust: 1.0
vendor:	lenovo	model:	thinkpad helix 20cg bios	scope:	eq	version:	-	Trust: 1.0
vendor:	lenovo	model:	thinkpad s5 yoga 15	scope:	eq	version:	-	Trust: 1.0
vendor:	lenovo	model:	thinkpad x260	scope:	eq	version:	-	Trust: 1.0
vendor:	lenovo	model:	thinkpad helix 20ch bios	scope:	eq	version:	-	Trust: 1.0
vendor:	lenovo	model:	thinkpad x250 broadwell bios	scope:	eq	version:	-	Trust: 1.0
vendor:	lenovo	model:	thinkpad p50s bios	scope:	eq	version:	-	Trust: 1.0
vendor:	lenovo	model:	thinkpad x1 carbon 20bx bios	scope:	eq	version:	-	Trust: 1.0
vendor:	lenovo	model:	thinkpad 10	scope:	-	version:	-	Trust: 0.8
vendor:	lenovo	model:	thinkpad 10 bios	scope:	-	version:	-	Trust: 0.8
vendor:	lenovo	model:	thinkpad 13e	scope:	-	version:	-	Trust: 0.8
vendor:	lenovo	model:	thinkpad 13e bios	scope:	-	version:	-	Trust: 0.8
vendor:	lenovo	model:	thinkpad e450	scope:	-	version:	-	Trust: 0.8
vendor:	lenovo	model:	thinkpad e450 bios	scope:	-	version:	-	Trust: 0.8
vendor:	lenovo	model:	thinkpad e450c	scope:	-	version:	-	Trust: 0.8
vendor:	lenovo	model:	thinkpad e450c bios	scope:	-	version:	-	Trust: 0.8
vendor:	lenovo	model:	thinkpad e455	scope:	-	version:	-	Trust: 0.8
vendor:	lenovo	model:	thinkpad e455 bios	scope:	-	version:	-	Trust: 0.8
vendor:	lenovo	model:	thinkpad e460	scope:	-	version:	-	Trust: 0.8
vendor:	lenovo	model:	thinkpad e460 bios	scope:	-	version:	-	Trust: 0.8
vendor:	lenovo	model:	thinkpad e465	scope:	-	version:	-	Trust: 0.8
vendor:	lenovo	model:	thinkpad e465 bios	scope:	-	version:	-	Trust: 0.8
vendor:	lenovo	model:	thinkpad e550	scope:	-	version:	-	Trust: 0.8
vendor:	lenovo	model:	thinkpad e550 bios	scope:	-	version:	-	Trust: 0.8
vendor:	lenovo	model:	thinkpad e550c	scope:	-	version:	-	Trust: 0.8
vendor:	lenovo	model:	thinkpad e550c bios	scope:	-	version:	-	Trust: 0.8
vendor:	lenovo	model:	thinkpad e555	scope:	-	version:	-	Trust: 0.8
vendor:	lenovo	model:	thinkpad e555 bios	scope:	-	version:	-	Trust: 0.8
vendor:	lenovo	model:	thinkpad e560	scope:	-	version:	-	Trust: 0.8
vendor:	lenovo	model:	thinkpad e560 bios	scope:	-	version:	-	Trust: 0.8
vendor:	lenovo	model:	thinkpad e565	scope:	-	version:	-	Trust: 0.8
vendor:	lenovo	model:	thinkpad e565 bios	scope:	-	version:	-	Trust: 0.8
vendor:	lenovo	model:	thinkpad edge e440	scope:	-	version:	-	Trust: 0.8
vendor:	lenovo	model:	thinkpad edge e440 bios	scope:	-	version:	-	Trust: 0.8
vendor:	lenovo	model:	thinkpad edge e445	scope:	-	version:	-	Trust: 0.8
vendor:	lenovo	model:	thinkpad edge e445 bios	scope:	-	version:	-	Trust: 0.8
vendor:	lenovo	model:	thinkpad edge e540	scope:	-	version:	-	Trust: 0.8
vendor:	lenovo	model:	thinkpad edge e540 bios	scope:	-	version:	-	Trust: 0.8
vendor:	lenovo	model:	thinkpad edge e545	scope:	-	version:	-	Trust: 0.8
vendor:	lenovo	model:	thinkpad edge e545 bios	scope:	-	version:	-	Trust: 0.8
vendor:	lenovo	model:	thinkpad helix 20cg	scope:	-	version:	-	Trust: 0.8
vendor:	lenovo	model:	thinkpad helix 20cg bios	scope:	-	version:	-	Trust: 0.8
vendor:	lenovo	model:	thinkpad helix 20ch	scope:	-	version:	-	Trust: 0.8
vendor:	lenovo	model:	thinkpad helix 20ch bios	scope:	-	version:	-	Trust: 0.8
vendor:	lenovo	model:	thinkpad l440	scope:	-	version:	-	Trust: 0.8
vendor:	lenovo	model:	thinkpad l440 bios	scope:	-	version:	-	Trust: 0.8
vendor:	lenovo	model:	thinkpad l450	scope:	-	version:	-	Trust: 0.8
vendor:	lenovo	model:	thinkpad l450 bios	scope:	-	version:	-	Trust: 0.8
vendor:	lenovo	model:	thinkpad l460	scope:	-	version:	-	Trust: 0.8
vendor:	lenovo	model:	thinkpad l460 bios	scope:	-	version:	-	Trust: 0.8
vendor:	lenovo	model:	thinkpad l540	scope:	-	version:	-	Trust: 0.8
vendor:	lenovo	model:	thinkpad l540 bios	scope:	-	version:	-	Trust: 0.8
vendor:	lenovo	model:	thinkpad l560	scope:	-	version:	-	Trust: 0.8
vendor:	lenovo	model:	thinkpad l560 bios	scope:	-	version:	-	Trust: 0.8
vendor:	lenovo	model:	thinkpad p50	scope:	-	version:	-	Trust: 0.8
vendor:	lenovo	model:	thinkpad p50 bios	scope:	-	version:	-	Trust: 0.8
vendor:	lenovo	model:	thinkpad p50s	scope:	-	version:	-	Trust: 0.8
vendor:	lenovo	model:	thinkpad p50s bios	scope:	-	version:	-	Trust: 0.8
vendor:	lenovo	model:	thinkpad p70	scope:	-	version:	-	Trust: 0.8
vendor:	lenovo	model:	thinkpad p70 bios	scope:	-	version:	-	Trust: 0.8
vendor:	lenovo	model:	thinkpad s1 yoga 12	scope:	-	version:	-	Trust: 0.8
vendor:	lenovo	model:	thinkpad s1 yoga 12 bios	scope:	-	version:	-	Trust: 0.8
vendor:	lenovo	model:	thinkpad s3 yoga 14	scope:	-	version:	-	Trust: 0.8
vendor:	lenovo	model:	thinkpad s3 yoga 14 bios	scope:	-	version:	-	Trust: 0.8
vendor:	lenovo	model:	thinkpad s3-s440	scope:	-	version:	-	Trust: 0.8
vendor:	lenovo	model:	thinkpad s3-s440 bios	scope:	-	version:	-	Trust: 0.8
vendor:	lenovo	model:	thinkpad s5 yoga 15	scope:	-	version:	-	Trust: 0.8
vendor:	lenovo	model:	thinkpad s5 yoga 15 bios	scope:	-	version:	-	Trust: 0.8
vendor:	lenovo	model:	thinkpad s5/e560p	scope:	-	version:	-	Trust: 0.8
vendor:	lenovo	model:	thinkpad s5/e560p bios	scope:	-	version:	-	Trust: 0.8
vendor:	lenovo	model:	thinkpad s540	scope:	-	version:	-	Trust: 0.8
vendor:	lenovo	model:	thinkpad s540 bios	scope:	-	version:	-	Trust: 0.8
vendor:	lenovo	model:	thinkpad t440	scope:	-	version:	-	Trust: 0.8
vendor:	lenovo	model:	thinkpad t440 bios	scope:	-	version:	-	Trust: 0.8
vendor:	lenovo	model:	thinkpad t440p	scope:	-	version:	-	Trust: 0.8
vendor:	lenovo	model:	thinkpad t440p bios	scope:	-	version:	-	Trust: 0.8
vendor:	lenovo	model:	thinkpad t440s	scope:	-	version:	-	Trust: 0.8
vendor:	lenovo	model:	thinkpad t440s bios	scope:	-	version:	-	Trust: 0.8
vendor:	lenovo	model:	thinkpad t440u	scope:	-	version:	-	Trust: 0.8
vendor:	lenovo	model:	thinkpad t440u bios	scope:	-	version:	-	Trust: 0.8
vendor:	lenovo	model:	thinkpad t450	scope:	-	version:	-	Trust: 0.8
vendor:	lenovo	model:	thinkpad t450 bios	scope:	-	version:	-	Trust: 0.8
vendor:	lenovo	model:	thinkpad t450s	scope:	-	version:	-	Trust: 0.8
vendor:	lenovo	model:	thinkpad t450s bios	scope:	-	version:	-	Trust: 0.8
vendor:	lenovo	model:	thinkpad t460	scope:	-	version:	-	Trust: 0.8
vendor:	lenovo	model:	thinkpad t460 bios	scope:	-	version:	-	Trust: 0.8
vendor:	lenovo	model:	thinkpad t460p	scope:	-	version:	-	Trust: 0.8
vendor:	lenovo	model:	thinkpad t460p bios	scope:	-	version:	-	Trust: 0.8
vendor:	lenovo	model:	thinkpad t460s	scope:	-	version:	-	Trust: 0.8
vendor:	lenovo	model:	thinkpad t460s bios	scope:	-	version:	-	Trust: 0.8
vendor:	lenovo	model:	thinkpad t540	scope:	-	version:	-	Trust: 0.8
vendor:	lenovo	model:	thinkpad t540 bios	scope:	-	version:	-	Trust: 0.8
vendor:	lenovo	model:	thinkpad t540p	scope:	-	version:	-	Trust: 0.8
vendor:	lenovo	model:	thinkpad t540p bios	scope:	-	version:	-	Trust: 0.8
vendor:	lenovo	model:	thinkpad t550	scope:	-	version:	-	Trust: 0.8
vendor:	lenovo	model:	thinkpad t550 bios	scope:	-	version:	-	Trust: 0.8
vendor:	lenovo	model:	thinkpad t560	scope:	-	version:	-	Trust: 0.8
vendor:	lenovo	model:	thinkpad t560 bios	scope:	-	version:	-	Trust: 0.8
vendor:	lenovo	model:	thinkpad tablet 10	scope:	-	version:	-	Trust: 0.8
vendor:	lenovo	model:	thinkpad tablet 10 bios	scope:	-	version:	-	Trust: 0.8
vendor:	lenovo	model:	thinkpad tablet 8	scope:	-	version:	-	Trust: 0.8
vendor:	lenovo	model:	thinkpad tablet 8 bios	scope:	-	version:	-	Trust: 0.8
vendor:	lenovo	model:	thinkpad w540	scope:	-	version:	-	Trust: 0.8
vendor:	lenovo	model:	thinkpad w540 bios	scope:	-	version:	-	Trust: 0.8
vendor:	lenovo	model:	thinkpad w541	scope:	-	version:	-	Trust: 0.8
vendor:	lenovo	model:	thinkpad w541 bios	scope:	-	version:	-	Trust: 0.8
vendor:	lenovo	model:	thinkpad w550s	scope:	-	version:	-	Trust: 0.8
vendor:	lenovo	model:	thinkpad w550s bios	scope:	-	version:	-	Trust: 0.8
vendor:	lenovo	model:	thinkpad x1 tablet	scope:	-	version:	-	Trust: 0.8
vendor:	lenovo	model:	thinkpad x1 tablet bios	scope:	-	version:	-	Trust: 0.8
vendor:	lenovo	model:	thinkpad x1 yoga	scope:	-	version:	-	Trust: 0.8
vendor:	lenovo	model:	thinkpad x1 yoga bios	scope:	-	version:	-	Trust: 0.8
vendor:	lenovo	model:	thinkpad x140e	scope:	-	version:	-	Trust: 0.8
vendor:	lenovo	model:	thinkpad x140e bios	scope:	-	version:	-	Trust: 0.8
vendor:	lenovo	model:	thinkpad x240	scope:	-	version:	-	Trust: 0.8
vendor:	lenovo	model:	thinkpad x240 bios	scope:	-	version:	-	Trust: 0.8
vendor:	lenovo	model:	thinkpad x240s	scope:	-	version:	-	Trust: 0.8
vendor:	lenovo	model:	thinkpad x240s bios	scope:	-	version:	-	Trust: 0.8
vendor:	lenovo	model:	thinkpad x260	scope:	-	version:	-	Trust: 0.8
vendor:	lenovo	model:	thinkpad x260 bios	scope:	-	version:	-	Trust: 0.8
vendor:	lenovo	model:	thinkpad yoga 14 460 s3	scope:	-	version:	-	Trust: 0.8
vendor:	lenovo	model:	thinkpad yoga 14 460 s3 bios	scope:	-	version:	-	Trust: 0.8
vendor:	lenovo	model:	thinkpad yoga 260 s1	scope:	-	version:	-	Trust: 0.8
vendor:	lenovo	model:	thinkpad yoga 260 s1 bios	scope:	-	version:	-	Trust: 0.8
vendor:	lenovo	model:	thinkpad	scope:	eq	version:	0	Trust: 0.3
vendor:	lenovo	model:	active protection system	scope:	eq	version:	0	Trust: 0.3
vendor:	lenovo	model:	active protection system	scope:	ne	version:	1.82.0.17	Trust: 0.3

sources: BID: 100305 // JVNDB: JVNDB-2017-007637 // CNNVD: CNNVD-201708-641 // NVD: CVE-2017-3756

CVSS

SEVERITY

CVSSV2

CVSSV3

nvd@nist.gov:	CVE-2017-3756
value:	HIGH
Trust: 1.0
NVD:	CVE-2017-3756
value:	HIGH
Trust: 0.8
CNNVD:	CNNVD-201708-641
value:	HIGH
Trust: 0.6
VULHUB:	VHN-111959
value:	HIGH
Trust: 0.1

nvd@nist.gov:	CVE-2017-3756
severity:	HIGH
baseScore:	7.2
vectorString:	AV:L/AC:L/AU:N/C:C/I:C/A:C
accessVector:	LOCAL
accessComplexity:	LOW
authentication:	NONE
confidentialityImpact:	COMPLETE
integrityImpact:	COMPLETE
availabilityImpact:	COMPLETE
exploitabilityScore:	3.9
impactScore:	10.0
acInsufInfo:	NONE
obtainAllPrivilege:	NONE
obtainUserPrivilege:	NONE
obtainOtherPrivilege:	NONE
userInteractionRequired:	NONE
version:	2.0
Trust: 1.8
VULHUB:	VHN-111959
severity:	HIGH
baseScore:	7.2
vectorString:	AV:L/AC:L/AU:N/C:C/I:C/A:C
accessVector:	LOCAL
accessComplexity:	LOW
authentication:	NONE
confidentialityImpact:	COMPLETE
integrityImpact:	COMPLETE
availabilityImpact:	COMPLETE
exploitabilityScore:	3.9
impactScore:	10.0
acInsufInfo:	NONE
obtainAllPrivilege:	NONE
obtainUserPrivilege:	NONE
obtainOtherPrivilege:	NONE
userInteractionRequired:	NONE
version:	2.0
Trust: 0.1

nvd@nist.gov:	CVE-2017-3756
baseSeverity:	HIGH
baseScore:	7.8
vectorString:	CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
attackVector:	LOCAL
attackComplexity:	LOW
privilegesRequired:	LOW
userInteraction:	NONE
scope:	UNCHANGED
confidentialityImpact:	HIGH
integrityImpact:	HIGH
availabilityImpact:	HIGH
exploitabilityScore:	1.8
impactScore:	5.9
version:	3.0
Trust: 1.8

sources: VULHUB: VHN-111959 // JVNDB: JVNDB-2017-007637 // CNNVD: CNNVD-201708-641 // NVD: CVE-2017-3756

PROBLEMTYPE DATA

problemtype:	NVD-CWE-noinfo	Trust: 1.0
problemtype:	CWE-264	Trust: 0.9

sources: VULHUB: VHN-111959 // JVNDB: JVNDB-2017-007637 // NVD: CVE-2017-3756

THREAT TYPE

local

Trust: 0.9

sources: BID: 100305 // CNNVD: CNNVD-201708-641

TYPE

permissions and access control issues

Trust: 0.6

sources: CNNVD: CNNVD-201708-641

CONFIGURATIONS

sources: JVNDB: JVNDB-2017-007637

PATCH

title:	LEN-15765	url:	https://support.lenovo.com/jp/en/product_security/len-15765	Trust: 0.8
title:	Lenovo ThinkPad for Windows Active Protection System Fixes for permission permissions and access control vulnerabilities	url:	http://www.cnnvd.org.cn/web/xxk/bdxqById.tag?id=74015	Trust: 0.6

sources: JVNDB: JVNDB-2017-007637 // CNNVD: CNNVD-201708-641

EXTERNAL IDS

db:	NVD	id:	CVE-2017-3756	Trust: 2.8
db:	LENOVO	id:	LEN-15765	Trust: 2.0
db:	BID	id:	100305	Trust: 2.0
db:	JVNDB	id:	JVNDB-2017-007637	Trust: 0.8
db:	CNNVD	id:	CNNVD-201708-641	Trust: 0.7
db:	VULHUB	id:	VHN-111959	Trust: 0.1

sources: VULHUB: VHN-111959 // BID: 100305 // JVNDB: JVNDB-2017-007637 // CNNVD: CNNVD-201708-641 // NVD: CVE-2017-3756

REFERENCES

url:	https://support.lenovo.com/us/en/product_security/len-15765	Trust: 2.0
url:	http://www.securityfocus.com/bid/100305	Trust: 1.7
url:	http://cve.mitre.org/cgi-bin/cvename.cgi?name=cve-2017-3756	Trust: 0.8
url:	https://nvd.nist.gov/vuln/detail/cve-2017-3756	Trust: 0.8
url:	http://www.lenovo.com/ca/en/	Trust: 0.3

sources: VULHUB: VHN-111959 // BID: 100305 // JVNDB: JVNDB-2017-007637 // CNNVD: CNNVD-201708-641 // NVD: CVE-2017-3756

CREDITS

Silent Signal

Trust: 0.9

sources: BID: 100305 // CNNVD: CNNVD-201708-641

SOURCES

db:	VULHUB	id:	VHN-111959
db:	BID	id:	100305
db:	JVNDB	id:	JVNDB-2017-007637
db:	CNNVD	id:	CNNVD-201708-641
db:	NVD	id:	CVE-2017-3756

LAST UPDATE DATE

2024-11-23T22:42:08.450000+00:00

SOURCES UPDATE DATE

db:	VULHUB	id:	VHN-111959	date:	2019-10-03T00:00:00
db:	BID	id:	100305	date:	2017-08-10T00:00:00
db:	JVNDB	id:	JVNDB-2017-007637	date:	2017-09-27T00:00:00
db:	CNNVD	id:	CNNVD-201708-641	date:	2019-10-23T00:00:00
db:	NVD	id:	CVE-2017-3756	date:	2024-11-21T03:26:04.670

SOURCES RELEASE DATE

db:	VULHUB	id:	VHN-111959	date:	2017-08-18T00:00:00
db:	BID	id:	100305	date:	2017-08-10T00:00:00
db:	JVNDB	id:	JVNDB-2017-007637	date:	2017-09-27T00:00:00
db:	CNNVD	id:	CNNVD-201708-641	date:	2017-08-16T00:00:00
db:	NVD	id:	CVE-2017-3756	date:	2017-08-18T19:29:00.230