All the vulnerabilites related to lenovo - thinkpad_l470_kbl
cve-2017-3767
Vulnerability from cvelistv5
Published
2017-11-13 16:00
Modified
2024-09-17 01:27
Severity ?
Summary
A local privilege escalation vulnerability was identified in the Realtek audio driver versions prior to 6.0.1.8224 in some Lenovo ThinkPad products. An attacker with local privileges could execute code with administrative privileges.
References
Impacted products
Vendor Product Version
Show details on NVD website


{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-05T14:39:40.326Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://support.lenovo.com/us/en/product_security/LEN-15759"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "Realtek Audio Driver",
          "vendor": "Lenovo Group Ltd.",
          "versions": [
            {
              "status": "affected",
              "version": "Earlier than 6.0.1.8224"
            }
          ]
        }
      ],
      "datePublic": "2017-11-09T00:00:00",
      "descriptions": [
        {
          "lang": "en",
          "value": "A local privilege escalation vulnerability was identified in the Realtek audio driver versions prior to 6.0.1.8224 in some Lenovo ThinkPad products. An attacker with local privileges could execute code with administrative privileges."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "Local priviledge escalation",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2017-11-13T15:57:01",
        "orgId": "da227ddf-6e25-4b41-b023-0f976dcaca4b",
        "shortName": "lenovo"
      },
      "references": [
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://support.lenovo.com/us/en/product_security/LEN-15759"
        }
      ],
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "psirt@lenovo.com",
          "DATE_PUBLIC": "2017-11-09T00:00:00",
          "ID": "CVE-2017-3767",
          "STATE": "PUBLIC"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "Realtek Audio Driver",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "Earlier than 6.0.1.8224"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "Lenovo Group Ltd."
              }
            ]
          }
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "A local privilege escalation vulnerability was identified in the Realtek audio driver versions prior to 6.0.1.8224 in some Lenovo ThinkPad products. An attacker with local privileges could execute code with administrative privileges."
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "Local priviledge escalation"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "https://support.lenovo.com/us/en/product_security/LEN-15759",
              "refsource": "CONFIRM",
              "url": "https://support.lenovo.com/us/en/product_security/LEN-15759"
            }
          ]
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "da227ddf-6e25-4b41-b023-0f976dcaca4b",
    "assignerShortName": "lenovo",
    "cveId": "CVE-2017-3767",
    "datePublished": "2017-11-13T16:00:00Z",
    "dateReserved": "2016-12-16T00:00:00",
    "dateUpdated": "2024-09-17T01:27:06.643Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

Vulnerability from fkie_nvd
Published
2017-11-13 16:29
Modified
2024-11-21 03:26
Summary
A local privilege escalation vulnerability was identified in the Realtek audio driver versions prior to 6.0.1.8224 in some Lenovo ThinkPad products. An attacker with local privileges could execute code with administrative privileges.



{
  "configurations": [
    {
      "nodes": [
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:o:realtek:audio_driver_firmware:*:*:*:*:*:*:*:*",
              "matchCriteriaId": "C5CB6C7A-AC02-466E-A751-95E5D7DC05A2",
              "versionEndExcluding": "6.0.1.8224",
              "vulnerable": true
            }
          ],
          "negate": false,
          "operator": "OR"
        },
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:h:lenovo:thinkpad_10:-:*:*:*:*:*:*:*",
              "matchCriteriaId": "08D70BE2-1945-4164-ACE8-8BBCDE1D6D67",
              "vulnerable": false
            },
            {
              "criteria": "cpe:2.3:h:lenovo:thinkpad_11e:-:*:*:*:*:*:*:*",
              "matchCriteriaId": "247E4294-2547-4A1D-942A-170DA5DDB388",
              "vulnerable": false
            },
            {
              "criteria": "cpe:2.3:h:lenovo:thinkpad_13:-:*:*:*:*:*:*:*",
              "matchCriteriaId": "3AAD24C2-BA08-4827-A19A-33C4D71C573F",
              "vulnerable": false
            },
            {
              "criteria": "cpe:2.3:h:lenovo:thinkpad_l450:-:*:*:*:*:*:*:*",
              "matchCriteriaId": "7A581500-3F97-4B68-92F9-0EE9182603CE",
              "vulnerable": false
            },
            {
              "criteria": "cpe:2.3:h:lenovo:thinkpad_l460:-:*:*:*:*:*:*:*",
              "matchCriteriaId": "25DE4E9C-5296-4FB5-A2FD-363D4682E6D6",
              "vulnerable": false
            },
            {
              "criteria": "cpe:2.3:h:lenovo:thinkpad_l470_kbl:-:*:*:*:*:*:*:*",
              "matchCriteriaId": "480D7F96-0F40-411A-9EE9-7640E9B7E8C7",
              "vulnerable": false
            },
            {
              "criteria": "cpe:2.3:h:lenovo:thinkpad_l470_skl:-:*:*:*:*:*:*:*",
              "matchCriteriaId": "1C86E79D-F40D-4151-A5CA-C797A40D7ADF",
              "vulnerable": false
            },
            {
              "criteria": "cpe:2.3:h:lenovo:thinkpad_l560:-:*:*:*:*:*:*:*",
              "matchCriteriaId": "4FDA2BC8-0ABC-41EA-80BF-00B36564F0A1",
              "vulnerable": false
            },
            {
              "criteria": "cpe:2.3:h:lenovo:thinkpad_p50:-:*:*:*:*:*:*:*",
              "matchCriteriaId": "2A146DB0-4E3D-491B-8D30-EBF0F3BC17B2",
              "vulnerable": false
            },
            {
              "criteria": "cpe:2.3:h:lenovo:thinkpad_p50s:-:*:*:*:*:*:*:*",
              "matchCriteriaId": "F583B121-A68C-463B-9D72-06061F74D007",
              "vulnerable": false
            },
            {
              "criteria": "cpe:2.3:h:lenovo:thinkpad_p51s:-:*:*:*:*:*:*:*",
              "matchCriteriaId": "A84E6D8C-CB5E-4B50-B364-4E8AB4985A57",
              "vulnerable": false
            },
            {
              "criteria": "cpe:2.3:h:lenovo:thinkpad_p70:-:*:*:*:*:*:*:*",
              "matchCriteriaId": "A1669BD8-C96F-4302-8E80-53D90EA719CA",
              "vulnerable": false
            },
            {
              "criteria": "cpe:2.3:h:lenovo:thinkpad_p71:-:*:*:*:*:*:*:*",
              "matchCriteriaId": "FF50A012-EFAE-485E-AADB-7D0AADEF21AC",
              "vulnerable": false
            },
            {
              "criteria": "cpe:2.3:h:lenovo:thinkpad_s1:-:*:*:*:*:*:*:*",
              "matchCriteriaId": "CBA5DC9E-8AC7-4A57-979A-09B93FADF461",
              "vulnerable": false
            },
            {
              "criteria": "cpe:2.3:h:lenovo:thinkpad_s1_yoga:-:*:*:*:*:*:*:*",
              "matchCriteriaId": "39513D4D-DE8B-4D9C-BB79-EFAD6E3226B1",
              "vulnerable": false
            },
            {
              "criteria": "cpe:2.3:h:lenovo:thinkpad_s1_yoga_12:-:*:*:*:*:*:*:*",
              "matchCriteriaId": "52944176-C48C-4439-B0F5-9584491867CA",
              "vulnerable": false
            },
            {
              "criteria": "cpe:2.3:h:lenovo:thinkpad_s2:-:*:*:*:*:*:*:*",
              "matchCriteriaId": "546EB3DE-4A03-4C52-A00C-FDCBFBD21EB3",
              "vulnerable": false
            },
            {
              "criteria": "cpe:2.3:h:lenovo:thinkpad_t440:-:*:*:*:*:*:*:*",
              "matchCriteriaId": "28A4F2A0-BA6D-48F7-8805-7CE17AEE6DE5",
              "vulnerable": false
            },
            {
              "criteria": "cpe:2.3:h:lenovo:thinkpad_t440p:-:*:*:*:*:*:*:*",
              "matchCriteriaId": "55A6E989-646D-4B08-A475-BFF70B6286F4",
              "vulnerable": false
            },
            {
              "criteria": "cpe:2.3:h:lenovo:thinkpad_t440s:-:*:*:*:*:*:*:*",
              "matchCriteriaId": "DAF1A0BA-A517-4BDA-9B10-07284A572577",
              "vulnerable": false
            },
            {
              "criteria": "cpe:2.3:h:lenovo:thinkpad_t450:-:*:*:*:*:*:*:*",
              "matchCriteriaId": "D943E973-EEAF-48E6-BD8A-05C61EA4FD0D",
              "vulnerable": false
            },
            {
              "criteria": "cpe:2.3:h:lenovo:thinkpad_t450s:-:*:*:*:*:*:*:*",
              "matchCriteriaId": "BDB7FFCD-F586-4846-9053-B56EA599D4EE",
              "vulnerable": false
            },
            {
              "criteria": "cpe:2.3:h:lenovo:thinkpad_t460:-:*:*:*:*:*:*:*",
              "matchCriteriaId": "D86FD3AD-D731-4C30-8A72-EC1A45B203F0",
              "vulnerable": false
            },
            {
              "criteria": "cpe:2.3:h:lenovo:thinkpad_t460p:-:*:*:*:*:*:*:*",
              "matchCriteriaId": "C1E6AE13-913E-4FD7-A0DC-F554605F81B6",
              "vulnerable": false
            },
            {
              "criteria": "cpe:2.3:h:lenovo:thinkpad_t460s:-:*:*:*:*:*:*:*",
              "matchCriteriaId": "75E38817-144F-41B9-9EE5-2A78F4DBC718",
              "vulnerable": false
            },
            {
              "criteria": "cpe:2.3:h:lenovo:thinkpad_t470:-:*:*:*:*:*:*:*",
              "matchCriteriaId": "6515A024-F5A8-494F-BCB6-0DD2D1CA4EA7",
              "vulnerable": false
            },
            {
              "criteria": "cpe:2.3:h:lenovo:thinkpad_t470p:-:*:*:*:*:*:*:*",
              "matchCriteriaId": "8796BA28-2705-4798-A95C-A821BB941A03",
              "vulnerable": false
            },
            {
              "criteria": "cpe:2.3:h:lenovo:thinkpad_t470s_skl:-:*:*:*:*:*:*:*",
              "matchCriteriaId": "0B71CE5D-B293-452A-919E-F55857AFD7C0",
              "vulnerable": false
            },
            {
              "criteria": "cpe:2.3:h:lenovo:thinkpad_t540p:-:*:*:*:*:*:*:*",
              "matchCriteriaId": "E207A025-49AB-4886-BDD9-36D624D40D6F",
              "vulnerable": false
            },
            {
              "criteria": "cpe:2.3:h:lenovo:thinkpad_t550:-:*:*:*:*:*:*:*",
              "matchCriteriaId": "9D79966D-08A3-428F-B4EC-CAAC8F4CF435",
              "vulnerable": false
            },
            {
              "criteria": "cpe:2.3:h:lenovo:thinkpad_t560:-:*:*:*:*:*:*:*",
              "matchCriteriaId": "84478711-E030-42CD-9B8A-0C54C8DB8128",
              "vulnerable": false
            },
            {
              "criteria": "cpe:2.3:h:lenovo:thinkpad_t570:-:*:*:*:*:*:*:*",
              "matchCriteriaId": "BEC1A912-C9FA-4D12-97A3-1D53B8209314",
              "vulnerable": false
            },
            {
              "criteria": "cpe:2.3:h:lenovo:thinkpad_w540:-:*:*:*:*:*:*:*",
              "matchCriteriaId": "B72A36A5-900B-4FFD-AF2D-FECD35E15AF5",
              "vulnerable": false
            },
            {
              "criteria": "cpe:2.3:h:lenovo:thinkpad_w541:-:*:*:*:*:*:*:*",
              "matchCriteriaId": "86A51FFE-257C-4609-BC14-C0DE0969E7F9",
              "vulnerable": false
            },
            {
              "criteria": "cpe:2.3:h:lenovo:thinkpad_w550s:-:*:*:*:*:*:*:*",
              "matchCriteriaId": "23267973-5F08-43C5-9C92-F429B84D3245",
              "vulnerable": false
            },
            {
              "criteria": "cpe:2.3:h:lenovo:thinkpad_x1_carbon:-:*:*:*:*:*:*:*",
              "matchCriteriaId": "0B9E7845-CEA3-43A4-8978-F447A45E0E53",
              "vulnerable": false
            },
            {
              "criteria": "cpe:2.3:h:lenovo:thinkpad_x1_tablet:-:*:*:*:*:*:*:*",
              "matchCriteriaId": "33C63844-B6F1-46B4-9267-361D7B94FD8D",
              "vulnerable": false
            },
            {
              "criteria": "cpe:2.3:h:lenovo:thinkpad_x1_yoga:-:*:*:*:*:*:*:*",
              "matchCriteriaId": "45044ABC-76BF-475E-9B12-A77901172E5D",
              "vulnerable": false
            },
            {
              "criteria": "cpe:2.3:h:lenovo:thinkpad_x1c:-:*:*:*:*:*:*:*",
              "matchCriteriaId": "3F037D95-3E77-49DF-9E06-A30A94A499AB",
              "vulnerable": false
            },
            {
              "criteria": "cpe:2.3:h:lenovo:thinkpad_x240:-:*:*:*:*:*:*:*",
              "matchCriteriaId": "F4E250F0-9F11-4BD6-A71A-4D2C82F193B9",
              "vulnerable": false
            },
            {
              "criteria": "cpe:2.3:h:lenovo:thinkpad_x240s:-:*:*:*:*:*:*:*",
              "matchCriteriaId": "2462DB48-9AC0-4E1F-A925-2DFC0CB54BB0",
              "vulnerable": false
            },
            {
              "criteria": "cpe:2.3:h:lenovo:thinkpad_x250:-:*:*:*:*:*:*:*",
              "matchCriteriaId": "AEA076E5-D554-4570-B5E3-FE78CEC024B4",
              "vulnerable": false
            },
            {
              "criteria": "cpe:2.3:h:lenovo:thinkpad_x260:-:*:*:*:*:*:*:*",
              "matchCriteriaId": "08393A13-D68E-4042-B223-EF80E581EEBC",
              "vulnerable": false
            },
            {
              "criteria": "cpe:2.3:h:lenovo:thinkpad_x270_kbl:-:*:*:*:*:*:*:*",
              "matchCriteriaId": "48C5691D-3050-4436-B5E6-2D0D2FBF8A10",
              "vulnerable": false
            },
            {
              "criteria": "cpe:2.3:h:lenovo:thinkpad_x270_skl:-:*:*:*:*:*:*:*",
              "matchCriteriaId": "014780DC-38B1-45B0-A94C-85B80C784758",
              "vulnerable": false
            },
            {
              "criteria": "cpe:2.3:h:lenovo:thinkpad_yoga_11e:-:*:*:*:*:*:*:*",
              "matchCriteriaId": "F6C2E66F-B45C-4850-8C19-2AD84939173C",
              "vulnerable": false
            }
          ],
          "negate": false,
          "operator": "OR"
        }
      ],
      "operator": "AND"
    }
  ],
  "cveTags": [],
  "descriptions": [
    {
      "lang": "en",
      "value": "A local privilege escalation vulnerability was identified in the Realtek audio driver versions prior to 6.0.1.8224 in some Lenovo ThinkPad products. An attacker with local privileges could execute code with administrative privileges."
    },
    {
      "lang": "es",
      "value": "Se ha identificado una vulnerabilidad de escalado de privilegios en las versiones anteriores a la 6.0.1.8224 del controlador de audio Realtek en productos Lenovo ThinkPad. Un atacante con privilegios locales podr\u00eda ejecutar c\u00f3digo con privilegios administrativos."
    }
  ],
  "id": "CVE-2017-3767",
  "lastModified": "2024-11-21T03:26:05.980",
  "metrics": {
    "cvssMetricV2": [
      {
        "acInsufInfo": false,
        "baseSeverity": "HIGH",
        "cvssData": {
          "accessComplexity": "LOW",
          "accessVector": "LOCAL",
          "authentication": "NONE",
          "availabilityImpact": "COMPLETE",
          "baseScore": 7.2,
          "confidentialityImpact": "COMPLETE",
          "integrityImpact": "COMPLETE",
          "vectorString": "AV:L/AC:L/Au:N/C:C/I:C/A:C",
          "version": "2.0"
        },
        "exploitabilityScore": 3.9,
        "impactScore": 10.0,
        "obtainAllPrivilege": false,
        "obtainOtherPrivilege": false,
        "obtainUserPrivilege": false,
        "source": "nvd@nist.gov",
        "type": "Primary",
        "userInteractionRequired": false
      }
    ],
    "cvssMetricV30": [
      {
        "cvssData": {
          "attackComplexity": "LOW",
          "attackVector": "LOCAL",
          "availabilityImpact": "HIGH",
          "baseScore": 7.8,
          "baseSeverity": "HIGH",
          "confidentialityImpact": "HIGH",
          "integrityImpact": "HIGH",
          "privilegesRequired": "LOW",
          "scope": "UNCHANGED",
          "userInteraction": "NONE",
          "vectorString": "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
          "version": "3.0"
        },
        "exploitabilityScore": 1.8,
        "impactScore": 5.9,
        "source": "nvd@nist.gov",
        "type": "Primary"
      }
    ]
  },
  "published": "2017-11-13T16:29:00.293",
  "references": [
    {
      "source": "psirt@lenovo.com",
      "tags": [
        "Issue Tracking",
        "Third Party Advisory"
      ],
      "url": "https://support.lenovo.com/us/en/product_security/LEN-15759"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "tags": [
        "Issue Tracking",
        "Third Party Advisory"
      ],
      "url": "https://support.lenovo.com/us/en/product_security/LEN-15759"
    }
  ],
  "sourceIdentifier": "psirt@lenovo.com",
  "vulnStatus": "Modified",
  "weaknesses": [
    {
      "description": [
        {
          "lang": "en",
          "value": "NVD-CWE-noinfo"
        }
      ],
      "source": "nvd@nist.gov",
      "type": "Primary"
    }
  ]
}