« Back to list

CVE-2017-3741

Status: ModifiedLow (3.3)—

In the Lenovo Power Management driver before 1.67.12.24, a local user may alter the trackpoint's firmware and stop the trackpoint from functioning correctly. This issue only affects ThinkPad X1 Carbon 5th generation.

CVSS

Exploitation probability (EPSS)

EPSS (Exploit Prediction Scoring System, FIRST) estimates how likely a vulnerability is to be exploited in the wild within 30 days. It complements CVSS (impact) and CISA KEV (confirmed exploitation).

Affected technologies (1)

Lenovo — Power Management

CWEs

References

Raw JSON (NVD)

Show
{
  "id": "CVE-2017-3741",
  "cveTags": [],
  "metrics": {
    "cvssMetricV2": [
      {
        "type": "Primary",
        "source": "nvd@nist.gov",
        "cvssData": {
          "version": "2.0",
          "baseScore": 2.1,
          "accessVector": "LOCAL",
          "vectorString": "AV:L/AC:L/Au:N/C:N/I:P/A:N",
          "authentication": "NONE",
          "integrityImpact": "PARTIAL",
          "accessComplexity": "LOW",
          "availabilityImpact": "NONE",
          "confidentialityImpact": "NONE"
        },
        "acInsufInfo": false,
        "impactScore": 2.9,
        "baseSeverity": "LOW",
        "obtainAllPrivilege": false,
        "exploitabilityScore": 3.9,
        "obtainUserPrivilege": false,
        "obtainOtherPrivilege": false,
        "userInteractionRequired": false
      }
    ],
    "cvssMetricV30": [
      {
        "type": "Primary",
        "source": "nvd@nist.gov",
        "cvssData": {
          "scope": "UNCHANGED",
          "version": "3.0",
          "baseScore": 3.3,
          "attackVector": "LOCAL",
          "baseSeverity": "LOW",
          "vectorString": "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N",
          "integrityImpact": "LOW",
          "userInteraction": "NONE",
          "attackComplexity": "LOW",
          "availabilityImpact": "NONE",
          "privilegesRequired": "LOW",
          "confidentialityImpact": "NONE"
        },
        "impactScore": 1.4,
        "exploitabilityScore": 1.8
      }
    ]
  },
  "affected": [
    {
      "source": "psirt@lenovo.com",
      "affectedData": [
        {
          "vendor": "Lenovo Group Ltd.",
          "product": "Power Management Driver",
          "versions": [
            {
              "status": "affected",
              "version": "ThinkPad X1 Carbon 5th Generation running versions 1.67.12.19 through 1.67.12.23"
            }
          ]
        }
      ]
    }
  ],
  "published": "2017-06-04T21:29:00.387",
  "references": [
    {
      "url": "https://support.lenovo.com/us/en/product_security/LEN-14440",
      "tags": [
        "Vendor Advisory"
      ],
      "source": "psirt@lenovo.com"
    },
    {
      "url": "https://support.lenovo.com/us/en/product_security/LEN-14440",
      "tags": [
        "Vendor Advisory"
      ],
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    }
  ],
  "vulnStatus": "Modified",
  "weaknesses": [
    {
      "type": "Primary",
      "source": "nvd@nist.gov",
      "description": [
        {
          "lang": "en",
          "value": "NVD-CWE-noinfo"
        }
      ]
    }
  ],
  "descriptions": [
    {
      "lang": "en",
      "value": "In the Lenovo Power Management driver before 1.67.12.24, a local user may alter the trackpoint's firmware and stop the trackpoint from functioning correctly. This issue only affects ThinkPad X1 Carbon 5th generation."
    },
    {
      "lang": "es",
      "value": "En el controlador de Lenovo Power Management anterior a versión 1.67.12.24, un usuario local puede modificar el firmware del trackpoint y evitar que el trackpoint funcione correctamente. Este problema solo afecta a la 5a generación de ThinkPad X1 Carbon."
    }
  ],
  "lastModified": "2026-06-17T01:18:49.980",
  "configurations": [
    {
      "nodes": [
        {
          "negate": false,
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:a:lenovo:power_management:1.67.12.19:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "3418B80A-8FDA-4442-B8DA-0FE391C9FD53"
            },
            {
              "criteria": "cpe:2.3:a:lenovo:power_management:1.67.12.23:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "5DEE20CF-C6C5-4602-B352-E08F44D4B19C"
            }
          ],
          "operator": "OR"
        },
        {
          "negate": false,
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:h:lenovo:thinkpad_x1_carbon_5:-:*:*:*:*:*:*:*",
              "vulnerable": false,
              "matchCriteriaId": "0A3B5592-2BC9-449C-A562-D178572716DA"
            }
          ],
          "operator": "OR"
        }
      ],
      "operator": "AND"
    }
  ],
  "sourceIdentifier": "psirt@lenovo.com"
}