1. Home
  2. CVE Database
  3. CVE-2017-3767
HIGH · 7.8

CVE-2017-3767

A local privilege escalation vulnerability was identified in the Realtek audio driver versions prior to 6.0.1.8224 in some Lenovo ThinkPad products. An attacker with local privileges could execute cod...

Vulnerability Description

A local privilege escalation vulnerability was identified in the Realtek audio driver versions prior to 6.0.1.8224 in some Lenovo ThinkPad products. An attacker with local privileges could execute code with administrative privileges.

CVSS Score

7.8

HIGH

CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Attack Vector
LOCAL
Attack Complexity
LOW
Privileges Required
LOW
User Interaction
NONE
Scope
UNCHANGED
Confidentiality
HIGH
Integrity
HIGH
Availability
HIGH

Affected Products

VendorProductVersions
RealtekAudio Driver Firmware< 6.0.1.8224
LenovoThinkpad 10-
LenovoThinkpad 11E-
LenovoThinkpad 13-
LenovoThinkpad L450-
LenovoThinkpad L460-
LenovoThinkpad L470 Kbl-
LenovoThinkpad L470 Skl-
LenovoThinkpad L560-
LenovoThinkpad P50-
LenovoThinkpad P50S-
LenovoThinkpad P51S-
LenovoThinkpad P70-
LenovoThinkpad P71-
LenovoThinkpad S1-
LenovoThinkpad S1 Yoga-
LenovoThinkpad S1 Yoga 12-
LenovoThinkpad S2-
LenovoThinkpad T440-
LenovoThinkpad T440P-

References

FAQ

What is CVE-2017-3767?

CVE-2017-3767 is a vulnerability with a CVSS score of 7.8 (HIGH). A local privilege escalation vulnerability was identified in the Realtek audio driver versions prior to 6.0.1.8224 in some Lenovo ThinkPad products. An attacker with local privileges could execute cod...

How severe is CVE-2017-3767?

CVE-2017-3767 has been rated HIGH with a CVSS base score of 7.8/10. Review the CVSS metrics above for detailed severity breakdown.

Is there a patch for CVE-2017-3767?

Check the references section above for vendor advisories and patch information. Affected products include: Realtek Audio Driver Firmware, Lenovo Thinkpad 10, Lenovo Thinkpad 11E, Lenovo Thinkpad 13, Lenovo Thinkpad L450.