{"id":"CVE-2017-3751","aliases":["EUVD-2017-12868","GHSA-mg67-hq97-f99j"],"status":"published","title":"An unquoted service path vulnerability was identified in the driver for the ThinkPad Compact USB...","description":"An unquoted service path vulnerability was identified in the driver for the ThinkPad Compact USB Keyboard with TrackPoint versions earlier than 1.5.5.0. This could allow an attacker with local privileges to execute code with administrative privileges.","severity":{"version":"3.0","score":7.8,"vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","level":"high","assessor":"primary","from":"nvd"},"epss":{"day":"2026-11-07","score":0.0037,"percentile":0.31146,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":false},"cwes":["CWE-428"],"published":"2017-08-10T00:00:00Z","modified":"2026-06-17T01:18:51Z","products":[{"vendor":"lenovo","product":"thinkpad_compact_usb_keyboard_driver"},{"vendor":"lenovo group ltd.","product":"thinkpad compact usb keyboard with trackpoint driver"}],"references":[{"url":"https://support.lenovo.com/us/en/product_security/LEN-15061","tags":["x_refsource_CONFIRM","x_transferred","Patch","Vendor Advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2017-3751"},{"url":"https://github.com/advisories/GHSA-mg67-hq97-f99j"}],"sources":{"cve":[{"id":"CVE-2017-3751","description":"An unquoted service path vulnerability was identified in the driver for the ThinkPad Compact USB Keyboard with TrackPoint versions earlier than 1.5.5.0. This could allow an attacker with local privileges to execute code with administrative privileges.","status":"published","published":"2017-08-10T00:00:00Z","modified":"2024-09-16T23:06:50.564Z","updated_at":"2026-11-02T14:33:16.232024Z"}],"euvd":[{"id":"EUVD-2017-12868","description":"An unquoted service path vulnerability was identified in the driver for the ThinkPad Compact USB Keyboard with TrackPoint versions earlier than 1.5.5.0. This could allow an attacker with local privileges to execute code with administrative privileges.","status":"published","published":"2017-08-10T00:00:00Z","modified":"2024-09-16T23:06:50Z","updated_at":"2026-11-03T00:54:56.209754Z"}],"ghsa":[{"id":"GHSA-mg67-hq97-f99j","title":"An unquoted service path vulnerability was identified in the driver for the ThinkPad Compact USB...","description":"An unquoted service path vulnerability was identified in the driver for the ThinkPad Compact USB Keyboard with TrackPoint versions earlier than 1.5.5.0. This could allow an attacker with local privileges to execute code with administrative privileges.","status":"published","published":"2022-05-17T01:57:41Z","modified":"2023-02-03T05:06:19Z","cvss":[{"version":"3.0","score":7.8,"vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","level":"high"}],"cwes":["CWE-428"],"updated_at":"2026-11-02T14:53:52.731364Z"}],"nvd":[{"id":"CVE-2017-3751","description":"An unquoted service path vulnerability was identified in the driver for the ThinkPad Compact USB Keyboard with TrackPoint versions earlier than 1.5.5.0. This could allow an attacker with local privileges to execute code with administrative privileges.","status":"published","published":"2017-08-10T00:29:00.183Z","modified":"2026-06-17T01:18:51.21Z","cvss":[{"version":"3.0","score":7.8,"vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","level":"high","assessor":"primary"},{"version":"2.0","score":7.2,"vector":"AV:L/AC:L/Au:N/C:C/I:C/A:C","level":"high","assessor":"primary"}],"cwes":["CWE-428"],"updated_at":"2026-11-02T14:03:57.282351Z"}]}}