CVE-2017-3741

LOW

Lenovo Power Management <1.67.12.24 - Info Disclosure

Title source: llm
STIX 2.1

Description

In the Lenovo Power Management driver before 1.67.12.24, a local user may alter the trackpoint's firmware and stop the trackpoint from functioning correctly. This issue only affects ThinkPad X1 Carbon 5th generation.

References (1)

Core 1
Core References

Scores

CVSS v3 3.3
EPSS 0.0005
EPSS Percentile 16.1%
Attack Vector LOCAL
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N

Details

Status published
Products (3)
lenovo/power_management 1.67.12.19
lenovo/power_management 1.67.12.23
Lenovo Group Ltd./Power Management Driver ThinkPad X1 Carbon 5th Generation running versions 1.67.12.19 through 1.67.12.23
Published Jun 04, 2017
Tracked Since Feb 18, 2026