{"id":"CVE-2017-3756","aliases":["EUVD-2017-12873","GHSA-mp3w-62hp-vh8j"],"status":"published","title":"A privilege escalation vulnerability was identified in Lenovo Active Protection System for...","description":"A privilege escalation vulnerability was identified in Lenovo Active Protection System for ThinkPad systems versions earlier than 1.82.0.17. An attacker with local privileges could execute code with administrative privileges via an unquoted service path.","severity":{"version":"3.0","score":7.8,"vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","level":"high","assessor":"primary","from":"nvd"},"epss":{"day":"2026-11-07","score":0.00376,"percentile":0.31784,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":false},"published":"2017-08-18T19:00:00Z","modified":"2026-06-17T01:18:51Z","products":[{"vendor":"lenovo","product":"thinkpad_10_ella_2"},{"vendor":"lenovo","product":"thinkpad_10_ella_2_bios"},{"vendor":"lenovo","product":"thinkpad_11e_beema"},{"vendor":"lenovo","product":"thinkpad_11e_beema_bios"},{"vendor":"lenovo","product":"thinkpad_11e_braswell"},{"vendor":"lenovo","product":"thinkpad_11e_braswell_bios"},{"vendor":"lenovo","product":"thinkpad_11e_broadwell"},{"vendor":"lenovo","product":"thinkpad_11e_broadwell_bios"},{"vendor":"lenovo","product":"thinkpad_11e_skylake"},{"vendor":"lenovo","product":"thinkpad_11e_skylake_bios"},{"vendor":"lenovo","product":"thinkpad_13e"},{"vendor":"lenovo","product":"thinkpad_13e_bios"},{"vendor":"lenovo","product":"thinkpad_e450"},{"vendor":"lenovo","product":"thinkpad_e450_bios"},{"vendor":"lenovo","product":"thinkpad_e450c"},{"vendor":"lenovo","product":"thinkpad_e450c_bios"},{"vendor":"lenovo","product":"thinkpad_e455"},{"vendor":"lenovo","product":"thinkpad_e455_bios"},{"vendor":"lenovo","product":"thinkpad_e460"},{"vendor":"lenovo","product":"thinkpad_e460_bios"},{"vendor":"lenovo","product":"thinkpad_e465"},{"vendor":"lenovo","product":"thinkpad_e465_bios"},{"vendor":"lenovo","product":"thinkpad_e550"},{"vendor":"lenovo","product":"thinkpad_e550_bios"},{"vendor":"lenovo","product":"thinkpad_e550c"},{"vendor":"lenovo","product":"thinkpad_e550c_bios"},{"vendor":"lenovo","product":"thinkpad_e555"},{"vendor":"lenovo","product":"thinkpad_e555_bios"},{"vendor":"lenovo","product":"thinkpad_e560"},{"vendor":"lenovo","product":"thinkpad_e560_bios"},{"vendor":"lenovo","product":"thinkpad_e565"},{"vendor":"lenovo","product":"thinkpad_e565_bios"},{"vendor":"lenovo","product":"thinkpad_edge_e440"},{"vendor":"lenovo","product":"thinkpad_edge_e440_bios"},{"vendor":"lenovo","product":"thinkpad_edge_e445"},{"vendor":"lenovo","product":"thinkpad_edge_e445_bios"},{"vendor":"lenovo","product":"thinkpad_edge_e540"},{"vendor":"lenovo","product":"thinkpad_edge_e540_bios"},{"vendor":"lenovo","product":"thinkpad_edge_e545"},{"vendor":"lenovo","product":"thinkpad_edge_e545_bios"},{"vendor":"lenovo","product":"thinkpad_helix_20cg"},{"vendor":"lenovo","product":"thinkpad_helix_20cg_bios"},{"vendor":"lenovo","product":"thinkpad_helix_20ch"},{"vendor":"lenovo","product":"thinkpad_helix_20ch_bios"},{"vendor":"lenovo","product":"thinkpad_l440"},{"vendor":"lenovo","product":"thinkpad_l440_bios"},{"vendor":"lenovo","product":"thinkpad_l450"},{"vendor":"lenovo","product":"thinkpad_l450_bios"},{"vendor":"lenovo","product":"thinkpad_l460"},{"vendor":"lenovo","product":"thinkpad_l460_bios"},{"vendor":"lenovo","product":"thinkpad_l540"},{"vendor":"lenovo","product":"thinkpad_l540_bios"},{"vendor":"lenovo","product":"thinkpad_l560"},{"vendor":"lenovo","product":"thinkpad_l560_bios"},{"vendor":"lenovo","product":"thinkpad_p50"},{"vendor":"lenovo","product":"thinkpad_p50_bios"},{"vendor":"lenovo","product":"thinkpad_p50s"},{"vendor":"lenovo","product":"thinkpad_p50s_bios"},{"vendor":"lenovo","product":"thinkpad_p70"},{"vendor":"lenovo","product":"thinkpad_p70_bios"},{"vendor":"lenovo","product":"thinkpad_s1_yoga_12"},{"vendor":"lenovo","product":"thinkpad_s1_yoga_12_bios"},{"vendor":"lenovo","product":"thinkpad_s1_yoga_non_vpro"},{"vendor":"lenovo","product":"thinkpad_s1_yoga_non_vpro_bios"},{"vendor":"lenovo","product":"thinkpad_s1_yoga_vpro"},{"vendor":"lenovo","product":"thinkpad_s1_yoga_vpro_bios"},{"vendor":"lenovo","product":"thinkpad_s3_s440"},{"vendor":"lenovo","product":"thinkpad_s3_s440_bios"},{"vendor":"lenovo","product":"thinkpad_s3_yoga_14"},{"vendor":"lenovo","product":"thinkpad_s3_yoga_14_bios"},{"vendor":"lenovo","product":"thinkpad_s540"},{"vendor":"lenovo","product":"thinkpad_s540_bios"},{"vendor":"lenovo","product":"thinkpad_s5_e560p"},{"vendor":"lenovo","product":"thinkpad_s5_e560p_bios"},{"vendor":"lenovo","product":"thinkpad_s5_yoga_15"},{"vendor":"lenovo","product":"thinkpad_s5_yoga_15_bios"},{"vendor":"lenovo","product":"thinkpad_t440"},{"vendor":"lenovo","product":"thinkpad_t440_bios"},{"vendor":"lenovo","product":"thinkpad_t440p"},{"vendor":"lenovo","product":"thinkpad_t440p_bios"},{"vendor":"lenovo","product":"thinkpad_t440s"},{"vendor":"lenovo","product":"thinkpad_t440s_bios"},{"vendor":"lenovo","product":"thinkpad_t440u"},{"vendor":"lenovo","product":"thinkpad_t440u_bios"},{"vendor":"lenovo","product":"thinkpad_t450"},{"vendor":"lenovo","product":"thinkpad_t450_bios"},{"vendor":"lenovo","product":"thinkpad_t450s"},{"vendor":"lenovo","product":"thinkpad_t450s_bios"},{"vendor":"lenovo","product":"thinkpad_t460"},{"vendor":"lenovo","product":"thinkpad_t460_bios"},{"vendor":"lenovo","product":"thinkpad_t460p"},{"vendor":"lenovo","product":"thinkpad_t460p_bios"},{"vendor":"lenovo","product":"thinkpad_t460s"},{"vendor":"lenovo","product":"thinkpad_t460s_bios"},{"vendor":"lenovo","product":"thinkpad_t540"},{"vendor":"lenovo","product":"thinkpad_t540_bios"},{"vendor":"lenovo","product":"thinkpad_t540p"},{"vendor":"lenovo","product":"thinkpad_t540p_bios"},{"vendor":"lenovo","product":"thinkpad_t550"},{"vendor":"lenovo","product":"thinkpad_t550_bios"},{"vendor":"lenovo","product":"thinkpad_t560"},{"vendor":"lenovo","product":"thinkpad_t560_bios"},{"vendor":"lenovo","product":"thinkpad_tablet_10"},{"vendor":"lenovo","product":"thinkpad_tablet_10_bios"},{"vendor":"lenovo","product":"thinkpad_tablet_8"},{"vendor":"lenovo","product":"thinkpad_tablet_8_bios"},{"vendor":"lenovo","product":"thinkpad_w540"},{"vendor":"lenovo","product":"thinkpad_w540_bios"},{"vendor":"lenovo","product":"thinkpad_w541"},{"vendor":"lenovo","product":"thinkpad_w541_bios"},{"vendor":"lenovo","product":"thinkpad_w550s"},{"vendor":"lenovo","product":"thinkpad_w550s_bios"},{"vendor":"lenovo","product":"thinkpad_x140e_amd"},{"vendor":"lenovo","product":"thinkpad_x140e_amd_bios"},{"vendor":"lenovo","product":"thinkpad_x1_carbon"},{"vendor":"lenovo","product":"thinkpad_x1_carbon_20ax"},{"vendor":"lenovo","product":"thinkpad_x1_carbon_20ax_bios"},{"vendor":"lenovo","product":"thinkpad_x1_carbon_20bx"},{"vendor":"lenovo","product":"thinkpad_x1_carbon_20bx_bios"},{"vendor":"lenovo","product":"thinkpad_x1_carbon_bios"},{"vendor":"lenovo","product":"thinkpad_x1_tablet"},{"vendor":"lenovo","product":"thinkpad_x1_tablet_bios"},{"vendor":"lenovo","product":"thinkpad_x1_yoga"},{"vendor":"lenovo","product":"thinkpad_x1_yoga_bios"},{"vendor":"lenovo","product":"thinkpad_x240"},{"vendor":"lenovo","product":"thinkpad_x240_bios"},{"vendor":"lenovo","product":"thinkpad_x240s"},{"vendor":"lenovo","product":"thinkpad_x240s_bios"},{"vendor":"lenovo","product":"thinkpad_x250_broadwell"},{"vendor":"lenovo","product":"thinkpad_x250_broadwell_bios"},{"vendor":"lenovo","product":"thinkpad_x250_sharkbay"},{"vendor":"lenovo","product":"thinkpad_x250_sharkbay_bios"},{"vendor":"lenovo","product":"thinkpad_x260"},{"vendor":"lenovo","product":"thinkpad_x260_bios"},{"vendor":"lenovo","product":"thinkpad_yoga_11e"},{"vendor":"lenovo","product":"thinkpad_yoga_11e_beema"},{"vendor":"lenovo","product":"thinkpad_yoga_11e_beema_bios"},{"vendor":"lenovo","product":"thinkpad_yoga_11e_bios"},{"vendor":"lenovo","product":"thinkpad_yoga_11e_braswell"},{"vendor":"lenovo","product":"thinkpad_yoga_11e_braswell_bios"},{"vendor":"lenovo","product":"thinkpad_yoga_11e_broadwell"},{"vendor":"lenovo","product":"thinkpad_yoga_11e_broadwell_bios"},{"vendor":"lenovo","product":"thinkpad_yoga_11e_skylake"},{"vendor":"lenovo","product":"thinkpad_yoga_11e_skylake_bios"},{"vendor":"lenovo","product":"thinkpad_yoga_14_460_s3"},{"vendor":"lenovo","product":"thinkpad_yoga_14_460_s3_bios"},{"vendor":"lenovo","product":"thinkpad_yoga_260_s1"},{"vendor":"lenovo","product":"thinkpad_yoga_260_s1_bios"},{"vendor":"lenovo group ltd.","product":"thinkpad active protection system"}],"references":[{"url":"http://www.securityfocus.com/bid/100305","tags":["vdb-entry","x_refsource_BID","x_transferred","Third Party Advisory","VDB Entry"]},{"url":"https://support.lenovo.com/us/en/product_security/LEN-15765","tags":["x_refsource_CONFIRM","x_transferred","Vendor Advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2017-3756"},{"url":"https://github.com/advisories/GHSA-mp3w-62hp-vh8j"}],"sources":{"cve":[{"id":"CVE-2017-3756","description":"A privilege escalation vulnerability was identified in Lenovo Active Protection System for ThinkPad systems versions earlier than 1.82.0.17. An attacker with local privileges could execute code with administrative privileges via an unquoted service path.","status":"published","published":"2017-08-18T19:00:00Z","modified":"2024-09-16T19:36:23.552Z","updated_at":"2026-11-02T14:33:16.232024Z"}],"euvd":[{"id":"EUVD-2017-12873","description":"A privilege escalation vulnerability was identified in Lenovo Active Protection System for ThinkPad systems versions earlier than 1.82.0.17. An attacker with local privileges could execute code with administrative privileges via an unquoted service path.","status":"published","published":"2017-08-18T19:00:00Z","modified":"2024-09-16T19:36:23Z","updated_at":"2026-11-03T00:55:21.523281Z"}],"ghsa":[{"id":"GHSA-mp3w-62hp-vh8j","title":"A privilege escalation vulnerability was identified in Lenovo Active Protection System for...","description":"A privilege escalation vulnerability was identified in Lenovo Active Protection System for ThinkPad systems versions earlier than 1.82.0.17. An attacker with local privileges could execute code with administrative privileges via an unquoted service path.","status":"published","published":"2022-05-13T01:45:52Z","modified":"2023-02-02T05:01:26Z","cvss":[{"version":"3.0","score":7.8,"vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T14:51:11.302625Z"}],"nvd":[{"id":"CVE-2017-3756","description":"A privilege escalation vulnerability was identified in Lenovo Active Protection System for ThinkPad systems versions earlier than 1.82.0.17. An attacker with local privileges could execute code with administrative privileges via an unquoted service path.","status":"published","published":"2017-08-18T19:29:00.23Z","modified":"2026-06-17T01:18:51.84Z","cvss":[{"version":"3.0","score":7.8,"vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","level":"high","assessor":"primary"},{"version":"2.0","score":7.2,"vector":"AV:L/AC:L/Au:N/C:C/I:C/A:C","level":"high","assessor":"primary"}],"updated_at":"2026-11-02T14:03:57.82609Z"}]}}