CVE-2017-3741 in Power Management Driver

Summary

In the Lenovo Power Management driver before 1.67.12.24, a local user may alter the trackpoint's firmware and stop the trackpoint from functioning correctly. This issue only affects ThinkPad X1 Carbon 5th generation.

If you want to get the best quality for vulnerability data then you always have to consider VulDB.

• Reservation: 12/16/2016
• Disclosure: 06/04/2017
• Moderation: VulDB entry created
• Entries: VDB-101937 (1)
• CPE: ready
• CWE: CWE-254 (Confirmed)
• CVSS: 3.3
• EPSS: 0.00051
• Activities: Very Low

Sources

• MITRE: https://www.cve.org/CVERecord?id=CVE-2017-3741
• NVD: https://nvd.nist.gov/vuln/detail/CVE-2017-3741
• CVE Details: https://www.cvedetails.com/cve/CVE-2017-3741/