{"id":"CVE-2017-3747","aliases":["EUVD-2017-12864","GHSA-rwqh-gr44-qvmg"],"status":"published","title":"Privilege escalation vulnerability in Lenovo Nerve Center for Windows 10 on Desktop systems ...","description":"Privilege escalation vulnerability in Lenovo Nerve Center for Windows 10 on Desktop systems (Lenovo Nerve Center for notebook systems is not affected) that could allow an attacker with local privileges on a system to alter registry keys.","severity":{"version":"3.0","score":5.5,"vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N","level":"medium","assessor":"primary","from":"nvd"},"epss":{"day":"2026-11-07","score":0.00286,"percentile":0.21257,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":false},"published":"2017-06-29T15:00:00Z","modified":"2026-06-17T01:18:50Z","products":[{"vendor":"lenovo","product":"nerve_center"},{"vendor":"lenovo group ltd.","product":"lenovo nerve center"}],"references":[{"url":"http://www.securityfocus.com/bid/99286","tags":["vdb-entry","x_refsource_BID","x_transferred","Third Party Advisory","VDB Entry"]},{"url":"https://support.lenovo.com/us/en/product_security/LEN-15046","tags":["x_refsource_CONFIRM","x_transferred","Vendor Advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2017-3747"},{"url":"https://github.com/advisories/GHSA-rwqh-gr44-qvmg"}],"sources":{"cve":[{"id":"CVE-2017-3747","description":"Privilege escalation vulnerability in Lenovo Nerve Center for Windows 10 on Desktop systems (Lenovo Nerve Center for notebook systems is not affected) that could allow an attacker with local privileges on a system to alter registry keys.","status":"published","published":"2017-06-29T15:00:00Z","modified":"2024-09-16T22:56:01.952Z","updated_at":"2026-11-02T14:33:16.232024Z"}],"euvd":[{"id":"EUVD-2017-12864","description":"Privilege escalation vulnerability in Lenovo Nerve Center for Windows 10 on Desktop systems (Lenovo Nerve Center for notebook systems is not affected) that could allow an attacker with local privileges on a system to alter registry keys.","status":"published","published":"2017-06-29T15:00:00Z","modified":"2024-09-16T22:56:01Z","updated_at":"2026-11-03T00:54:58.800859Z"}],"ghsa":[{"id":"GHSA-rwqh-gr44-qvmg","title":"Privilege escalation vulnerability in Lenovo Nerve Center for Windows 10 on Desktop systems ...","description":"Privilege escalation vulnerability in Lenovo Nerve Center for Windows 10 on Desktop systems (Lenovo Nerve Center for notebook systems is not affected) that could allow an attacker with local privileges on a system to alter registry keys.","status":"published","published":"2022-05-13T01:45:52Z","modified":"2023-02-02T05:01:21Z","cvss":[{"version":"3.0","score":5.5,"vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N","level":"medium"}],"updated_at":"2026-11-02T14:51:10.253822Z"}],"nvd":[{"id":"CVE-2017-3747","description":"Privilege escalation vulnerability in Lenovo Nerve Center for Windows 10 on Desktop systems (Lenovo Nerve Center for notebook systems is not affected) that could allow an attacker with local privileges on a system to alter registry keys.","status":"published","published":"2017-06-29T15:29:00.16Z","modified":"2026-06-17T01:18:50.707Z","cvss":[{"version":"3.0","score":5.5,"vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N","level":"medium","assessor":"primary"},{"version":"2.0","score":2.1,"vector":"AV:L/AC:L/Au:N/C:N/I:P/A:N","level":"low","assessor":"primary"}],"updated_at":"2026-11-02T14:03:51.893212Z"}]}}