CVE-2017-3767

A local privilege escalation vulnerability was identified in the Realtek audio driver versions prior to 6.0.1.8224 in some Lenovo ThinkPad products. An attacker with local privileges could execute code with administrative privileges.

CVSS v3 7.8 HIGH
CVSS v2.0 7.2 HIGH

7.8^/10

CVSS v3 : HIGH

V3 Legend

Vector : AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Exploitability : 1.8 / Impact : 5.9

Attack Vector LOCAL

Attack Complexity LOW

Privileges Required LOW

User Interaction NONE

Confidentiality Impact HIGH

Integrity Impact HIGH

Availability Impact HIGH

Scope UNCHANGED

7.2^/10

CVSS v2.0 : HIGH

V2 Legend

Vector : AV:L/AC:L/Au:N/C:C/I:C/A:C

Exploitability : 3.9 / Impact : 10.0

Access Vector LOCAL

Access Complexity LOW

Authentication NONE

Confidentiality Impact COMPLETE

Integrity Impact COMPLETE

Availability Impact COMPLETE

References

Link	Resource
https://support.lenovo.com/us/en/product_security/LEN-15759	Issue Tracking Third Party Advisory

Configurations

Configuration 1 (hide)

AND

OR	cpe:2.3:h:lenovo:thinkpad_10:-:::::::*
	cpe:2.3:h:lenovo:thinkpad_11e:-:::::::*
	cpe:2.3:h:lenovo:thinkpad_13:-:::::::*
	cpe:2.3:h:lenovo:thinkpad_l450:-:::::::*
	cpe:2.3:h:lenovo:thinkpad_l460:-:::::::*
	cpe:2.3:h:lenovo:thinkpad_l470_kbl:-:::::::*
	cpe:2.3:h:lenovo:thinkpad_l470_skl:-:::::::*
	cpe:2.3:h:lenovo:thinkpad_l560:-:::::::*
	cpe:2.3:h:lenovo:thinkpad_p50:-:::::::*
	cpe:2.3:h:lenovo:thinkpad_p50s:-:::::::*
	cpe:2.3:h:lenovo:thinkpad_p51s:-:::::::*
	cpe:2.3:h:lenovo:thinkpad_p70:-:::::::*
	cpe:2.3:h:lenovo:thinkpad_p71:-:::::::*
	cpe:2.3:h:lenovo:thinkpad_s1:-:::::::*
	cpe:2.3:h:lenovo:thinkpad_s1_yoga:-:::::::*
	cpe:2.3:h:lenovo:thinkpad_s1_yoga_12:-:::::::*
	cpe:2.3:h:lenovo:thinkpad_s2:-:::::::*
	cpe:2.3:h:lenovo:thinkpad_t440:-:::::::*
	cpe:2.3:h:lenovo:thinkpad_t440p:-:::::::*
	cpe:2.3:h:lenovo:thinkpad_t440s:-:::::::*
	cpe:2.3:h:lenovo:thinkpad_t450:-:::::::*
	cpe:2.3:h:lenovo:thinkpad_t450s:-:::::::*
	cpe:2.3:h:lenovo:thinkpad_t460:-:::::::*
	cpe:2.3:h:lenovo:thinkpad_t460p:-:::::::*
	cpe:2.3:h:lenovo:thinkpad_t460s:-:::::::*
	cpe:2.3:h:lenovo:thinkpad_t470:-:::::::*
	cpe:2.3:h:lenovo:thinkpad_t470p:-:::::::*
	cpe:2.3:h:lenovo:thinkpad_t470s_skl:-:::::::*
	cpe:2.3:h:lenovo:thinkpad_t540p:-:::::::*
	cpe:2.3:h:lenovo:thinkpad_t550:-:::::::*
	cpe:2.3:h:lenovo:thinkpad_t560:-:::::::*
	cpe:2.3:h:lenovo:thinkpad_t570:-:::::::*
	cpe:2.3:h:lenovo:thinkpad_w540:-:::::::*
	cpe:2.3:h:lenovo:thinkpad_w541:-:::::::*
	cpe:2.3:h:lenovo:thinkpad_w550s:-:::::::*
	cpe:2.3:h:lenovo:thinkpad_x1_carbon:-:::::::*
	cpe:2.3:h:lenovo:thinkpad_x1_tablet:-:::::::*
	cpe:2.3:h:lenovo:thinkpad_x1_yoga:-:::::::*
	cpe:2.3:h:lenovo:thinkpad_x1c:-:::::::*
	cpe:2.3:h:lenovo:thinkpad_x240:-:::::::*
	cpe:2.3:h:lenovo:thinkpad_x240s:-:::::::*
	cpe:2.3:h:lenovo:thinkpad_x250:-:::::::*
	cpe:2.3:h:lenovo:thinkpad_x260:-:::::::*
	cpe:2.3:h:lenovo:thinkpad_x270_kbl:-:::::::*
	cpe:2.3:h:lenovo:thinkpad_x270_skl:-:::::::*
	cpe:2.3:h:lenovo:thinkpad_yoga_11e:-:::::::*

cpe:2.3:o:realtek:audio_driver_firmware:*:*:*:*:*:*:*:*

History

No history.

Information

Published : 2017-11-13 16:29

Updated : 2019-10-03 00:03

NVD link : CVE-2017-3767

Mitre link : CVE-2017-3767

CVE.ORG link : CVE-2017-3767

JSON object : View

Products Affected

lenovo

thinkpad_t470
thinkpad_t440
thinkpad_l560
thinkpad_x1c
thinkpad_13
thinkpad_l450
thinkpad_s2
thinkpad_t440s
thinkpad_t570
thinkpad_s1_yoga_12
thinkpad_x1_yoga
thinkpad_p70
thinkpad_t470p
thinkpad_yoga_11e
thinkpad_x1_tablet
thinkpad_x250
thinkpad_t540p
thinkpad_t460s
thinkpad_x1_carbon
thinkpad_x240s
thinkpad_w541
thinkpad_l470_skl
thinkpad_s1_yoga
thinkpad_t550
thinkpad_t440p
thinkpad_l470_kbl
thinkpad_t450s
thinkpad_x240
thinkpad_x270_skl
thinkpad_p51s
thinkpad_x270_kbl
thinkpad_w540
thinkpad_p50
thinkpad_t450
thinkpad_11e
thinkpad_l460
thinkpad_10
thinkpad_w550s
thinkpad_x260
thinkpad_p71
thinkpad_t560
thinkpad_p50s
thinkpad_t470s_skl
thinkpad_t460
thinkpad_s1
thinkpad_t460p

realtek

audio_driver_firmware

CWE

NVD-CWE-noinfo

{"id": "CVE-2017-3767", "cveTags": [], "metrics": {"cvssMetricV2": [{"type": "Primary", "source": "nvd@nist.gov", "cvssData": {"version": "2.0", "baseScore": 7.2, "accessVector": "LOCAL", "vectorString": "AV:L/AC:L/Au:N/C:C/I:C/A:C", "authentication": "NONE", "integrityImpact": "COMPLETE", "accessComplexity": "LOW", "availabilityImpact": "COMPLETE", "confidentialityImpact": "COMPLETE"}, "acInsufInfo": false, "impactScore": 10.0, "baseSeverity": "HIGH", "obtainAllPrivilege": false, "exploitabilityScore": 3.9, "obtainUserPrivilege": false, "obtainOtherPrivilege": false, "userInteractionRequired": false}], "cvssMetricV30": [{"type": "Primary", "source": "nvd@nist.gov", "cvssData": {"scope": "UNCHANGED", "version": "3.0", "baseScore": 7.8, "attackVector": "LOCAL", "baseSeverity": "HIGH", "vectorString": "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "integrityImpact": "HIGH", "userInteraction": "NONE", "attackComplexity": "LOW", "availabilityImpact": "HIGH", "privilegesRequired": "LOW", "confidentialityImpact": "HIGH"}, "impactScore": 5.9, "exploitabilityScore": 1.8}]}, "published": "2017-11-13T16:29:00.293", "references": [{"url": "https://support.lenovo.com/us/en/product_security/LEN-15759", "tags": ["Issue Tracking", "Third Party Advisory"], "source": "psirt@lenovo.com"}], "vulnStatus": "Analyzed", "weaknesses": [{"type": "Primary", "source": "nvd@nist.gov", "description": [{"lang": "en", "value": "NVD-CWE-noinfo"}]}], "descriptions": [{"lang": "en", "value": "A local privilege escalation vulnerability was identified in the Realtek audio driver versions prior to 6.0.1.8224 in some Lenovo ThinkPad products. An attacker with local privileges could execute code with administrative privileges."}, {"lang": "es", "value": "Se ha identificado una vulnerabilidad de escalado de privilegios en las versiones anteriores a la 6.0.1.8224 del controlador de audio Realtek en productos Lenovo ThinkPad. Un atacante con privilegios locales podr\u00eda ejecutar c\u00f3digo con privilegios administrativos."}], "lastModified": "2019-10-03T00:03:26.223", "configurations": [{"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:h:lenovo:thinkpad_10:-:*:*:*:*:*:*:*", "vulnerable": false, "matchCriteriaId": "08D70BE2-1945-4164-ACE8-8BBCDE1D6D67"}, {"criteria": "cpe:2.3:h:lenovo:thinkpad_11e:-:*:*:*:*:*:*:*", "vulnerable": false, "matchCriteriaId": "247E4294-2547-4A1D-942A-170DA5DDB388"}, {"criteria": "cpe:2.3:h:lenovo:thinkpad_13:-:*:*:*:*:*:*:*", "vulnerable": false, "matchCriteriaId": "3AAD24C2-BA08-4827-A19A-33C4D71C573F"}, {"criteria": "cpe:2.3:h:lenovo:thinkpad_l450:-:*:*:*:*:*:*:*", "vulnerable": false, "matchCriteriaId": "7A581500-3F97-4B68-92F9-0EE9182603CE"}, {"criteria": "cpe:2.3:h:lenovo:thinkpad_l460:-:*:*:*:*:*:*:*", "vulnerable": false, "matchCriteriaId": "25DE4E9C-5296-4FB5-A2FD-363D4682E6D6"}, {"criteria": "cpe:2.3:h:lenovo:thinkpad_l470_kbl:-:*:*:*:*:*:*:*", "vulnerable": false, "matchCriteriaId": "480D7F96-0F40-411A-9EE9-7640E9B7E8C7"}, {"criteria": "cpe:2.3:h:lenovo:thinkpad_l470_skl:-:*:*:*:*:*:*:*", "vulnerable": false, "matchCriteriaId": "1C86E79D-F40D-4151-A5CA-C797A40D7ADF"}, {"criteria": "cpe:2.3:h:lenovo:thinkpad_l560:-:*:*:*:*:*:*:*", "vulnerable": false, "matchCriteriaId": "4FDA2BC8-0ABC-41EA-80BF-00B36564F0A1"}, {"criteria": "cpe:2.3:h:lenovo:thinkpad_p50:-:*:*:*:*:*:*:*", "vulnerable": false, "matchCriteriaId": "2A146DB0-4E3D-491B-8D30-EBF0F3BC17B2"}, {"criteria": "cpe:2.3:h:lenovo:thinkpad_p50s:-:*:*:*:*:*:*:*", "vulnerable": false, "matchCriteriaId": "F583B121-A68C-463B-9D72-06061F74D007"}, {"criteria": "cpe:2.3:h:lenovo:thinkpad_p51s:-:*:*:*:*:*:*:*", "vulnerable": false, "matchCriteriaId": "A84E6D8C-CB5E-4B50-B364-4E8AB4985A57"}, {"criteria": "cpe:2.3:h:lenovo:thinkpad_p70:-:*:*:*:*:*:*:*", "vulnerable": false, "matchCriteriaId": "A1669BD8-C96F-4302-8E80-53D90EA719CA"}, {"criteria": "cpe:2.3:h:lenovo:thinkpad_p71:-:*:*:*:*:*:*:*", "vulnerable": false, "matchCriteriaId": "FF50A012-EFAE-485E-AADB-7D0AADEF21AC"}, {"criteria": "cpe:2.3:h:lenovo:thinkpad_s1:-:*:*:*:*:*:*:*", "vulnerable": false, "matchCriteriaId": "CBA5DC9E-8AC7-4A57-979A-09B93FADF461"}, {"criteria": "cpe:2.3:h:lenovo:thinkpad_s1_yoga:-:*:*:*:*:*:*:*", "vulnerable": false, "matchCriteriaId": "39513D4D-DE8B-4D9C-BB79-EFAD6E3226B1"}, {"criteria": "cpe:2.3:h:lenovo:thinkpad_s1_yoga_12:-:*:*:*:*:*:*:*", "vulnerable": false, "matchCriteriaId": "52944176-C48C-4439-B0F5-9584491867CA"}, {"criteria": "cpe:2.3:h:lenovo:thinkpad_s2:-:*:*:*:*:*:*:*", "vulnerable": false, "matchCriteriaId": "546EB3DE-4A03-4C52-A00C-FDCBFBD21EB3"}, {"criteria": "cpe:2.3:h:lenovo:thinkpad_t440:-:*:*:*:*:*:*:*", "vulnerable": false, "matchCriteriaId": "28A4F2A0-BA6D-48F7-8805-7CE17AEE6DE5"}, {"criteria": "cpe:2.3:h:lenovo:thinkpad_t440p:-:*:*:*:*:*:*:*", "vulnerable": false, "matchCriteriaId": "55A6E989-646D-4B08-A475-BFF70B6286F4"}, {"criteria": "cpe:2.3:h:lenovo:thinkpad_t440s:-:*:*:*:*:*:*:*", "vulnerable": false, "matchCriteriaId": "DAF1A0BA-A517-4BDA-9B10-07284A572577"}, {"criteria": "cpe:2.3:h:lenovo:thinkpad_t450:-:*:*:*:*:*:*:*", "vulnerable": false, "matchCriteriaId": "D943E973-EEAF-48E6-BD8A-05C61EA4FD0D"}, {"criteria": "cpe:2.3:h:lenovo:thinkpad_t450s:-:*:*:*:*:*:*:*", "vulnerable": false, "matchCriteriaId": "BDB7FFCD-F586-4846-9053-B56EA599D4EE"}, {"criteria": "cpe:2.3:h:lenovo:thinkpad_t460:-:*:*:*:*:*:*:*", "vulnerable": false, "matchCriteriaId": "D86FD3AD-D731-4C30-8A72-EC1A45B203F0"}, {"criteria": "cpe:2.3:h:lenovo:thinkpad_t460p:-:*:*:*:*:*:*:*", "vulnerable": false, "matchCriteriaId": "C1E6AE13-913E-4FD7-A0DC-F554605F81B6"}, {"criteria": "cpe:2.3:h:lenovo:thinkpad_t460s:-:*:*:*:*:*:*:*", "vulnerable": false, "matchCriteriaId": "75E38817-144F-41B9-9EE5-2A78F4DBC718"}, {"criteria": "cpe:2.3:h:lenovo:thinkpad_t470:-:*:*:*:*:*:*:*", "vulnerable": false, "matchCriteriaId": "6515A024-F5A8-494F-BCB6-0DD2D1CA4EA7"}, {"criteria": "cpe:2.3:h:lenovo:thinkpad_t470p:-:*:*:*:*:*:*:*", "vulnerable": false, "matchCriteriaId": "8796BA28-2705-4798-A95C-A821BB941A03"}, {"criteria": "cpe:2.3:h:lenovo:thinkpad_t470s_skl:-:*:*:*:*:*:*:*", "vulnerable": false, "matchCriteriaId": "0B71CE5D-B293-452A-919E-F55857AFD7C0"}, {"criteria": "cpe:2.3:h:lenovo:thinkpad_t540p:-:*:*:*:*:*:*:*", "vulnerable": false, "matchCriteriaId": "E207A025-49AB-4886-BDD9-36D624D40D6F"}, {"criteria": "cpe:2.3:h:lenovo:thinkpad_t550:-:*:*:*:*:*:*:*", "vulnerable": false, "matchCriteriaId": "9D79966D-08A3-428F-B4EC-CAAC8F4CF435"}, {"criteria": "cpe:2.3:h:lenovo:thinkpad_t560:-:*:*:*:*:*:*:*", "vulnerable": false, "matchCriteriaId": "84478711-E030-42CD-9B8A-0C54C8DB8128"}, {"criteria": "cpe:2.3:h:lenovo:thinkpad_t570:-:*:*:*:*:*:*:*", "vulnerable": false, "matchCriteriaId": "BEC1A912-C9FA-4D12-97A3-1D53B8209314"}, {"criteria": "cpe:2.3:h:lenovo:thinkpad_w540:-:*:*:*:*:*:*:*", "vulnerable": false, "matchCriteriaId": "B72A36A5-900B-4FFD-AF2D-FECD35E15AF5"}, {"criteria": "cpe:2.3:h:lenovo:thinkpad_w541:-:*:*:*:*:*:*:*", "vulnerable": false, "matchCriteriaId": "86A51FFE-257C-4609-BC14-C0DE0969E7F9"}, {"criteria": "cpe:2.3:h:lenovo:thinkpad_w550s:-:*:*:*:*:*:*:*", "vulnerable": false, "matchCriteriaId": "23267973-5F08-43C5-9C92-F429B84D3245"}, {"criteria": "cpe:2.3:h:lenovo:thinkpad_x1_carbon:-:*:*:*:*:*:*:*", "vulnerable": false, "matchCriteriaId": "0B9E7845-CEA3-43A4-8978-F447A45E0E53"}, {"criteria": "cpe:2.3:h:lenovo:thinkpad_x1_tablet:-:*:*:*:*:*:*:*", "vulnerable": false, "matchCriteriaId": "33C63844-B6F1-46B4-9267-361D7B94FD8D"}, {"criteria": "cpe:2.3:h:lenovo:thinkpad_x1_yoga:-:*:*:*:*:*:*:*", "vulnerable": false, "matchCriteriaId": "45044ABC-76BF-475E-9B12-A77901172E5D"}, {"criteria": "cpe:2.3:h:lenovo:thinkpad_x1c:-:*:*:*:*:*:*:*", "vulnerable": false, "matchCriteriaId": "3F037D95-3E77-49DF-9E06-A30A94A499AB"}, {"criteria": "cpe:2.3:h:lenovo:thinkpad_x240:-:*:*:*:*:*:*:*", "vulnerable": false, "matchCriteriaId": "F4E250F0-9F11-4BD6-A71A-4D2C82F193B9"}, {"criteria": "cpe:2.3:h:lenovo:thinkpad_x240s:-:*:*:*:*:*:*:*", "vulnerable": false, "matchCriteriaId": "2462DB48-9AC0-4E1F-A925-2DFC0CB54BB0"}, {"criteria": "cpe:2.3:h:lenovo:thinkpad_x250:-:*:*:*:*:*:*:*", "vulnerable": false, "matchCriteriaId": "AEA076E5-D554-4570-B5E3-FE78CEC024B4"}, {"criteria": "cpe:2.3:h:lenovo:thinkpad_x260:-:*:*:*:*:*:*:*", "vulnerable": false, "matchCriteriaId": "08393A13-D68E-4042-B223-EF80E581EEBC"}, {"criteria": "cpe:2.3:h:lenovo:thinkpad_x270_kbl:-:*:*:*:*:*:*:*", "vulnerable": false, "matchCriteriaId": "48C5691D-3050-4436-B5E6-2D0D2FBF8A10"}, {"criteria": "cpe:2.3:h:lenovo:thinkpad_x270_skl:-:*:*:*:*:*:*:*", "vulnerable": false, "matchCriteriaId": "014780DC-38B1-45B0-A94C-85B80C784758"}, {"criteria": "cpe:2.3:h:lenovo:thinkpad_yoga_11e:-:*:*:*:*:*:*:*", "vulnerable": false, "matchCriteriaId": "F6C2E66F-B45C-4850-8C19-2AD84939173C"}], "operator": "OR"}, {"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:o:realtek:audio_driver_firmware:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "C5CB6C7A-AC02-466E-A751-95E5D7DC05A2", "versionEndExcluding": "6.0.1.8224"}], "operator": "OR"}], "operator": "AND"}], "sourceIdentifier": "psirt@lenovo.com"}

7.8 /10