What’s Vulnerable › Vulnerabilities

CVE-2017-3741

• Severity: low (CVSS 3.3 v3.0)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.3% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2017-06-04 · updated 2026-06-17

Description

In the Lenovo Power Management driver before 1.67.12.24, a local user may alter the trackpoint's firmware and stop the trackpoint from functioning correctly. This issue only affects ThinkPad X1 Carbon 5th generation.

Affected products

• Lenovo Group Ltd. Power Management Driver: 1.67.12.19, 1.67.12.23

References

• https://support.lenovo.com/us/en/product_security/LEN-14440
• https://support.lenovo.com/us/en/product_security/LEN-14440

Get alerted when CVE-2017-3741 or the next vulnerability affects your stack