Read the docs
TI-2017-02855 Aliases CVE-2017-3740GHSA-jj4c-v9g6-vg2x

In Lenovo Active Protection System before 1.82.0.14, an attacker with local privileges…

Priority LOW 25Published · Updated

Key facts

Attack vector
Local
Privileges required
Low
User interaction
None
Attack complexity
Low
Impact type
—
Confidentiality · integrity · availability
None · None · High
Fix status
Fixed

Attack profile from CVSS 3.0 · NVD. Fix status from CNA.

Summary

In Lenovo Active Protection System before 1.82.0.14, an attacker with local privileges could send commands to the system's embedded controller, which could cause a denial of service attack on the system or the ability to alter hardware functionality.

Why it matters now

EPSS 0.00348 28th percentileScored 2026-11-07
Fix Fixed Active Protection System (Lenovo Group Ltd.): 1.82.0.14

SSVC decision points

Not available: CISA has not published SSVC decision points for this record.

Affected products

VendorProductAffected versionsFixed inStatusSource
LenovoActive Protection Systembefore 1.82.0.141.82.0.14Patch availableCNA
  • Active Protection System VendorLenovo Affected before 1.82.0.14 Fixed in 1.82.0.14 Patch available CNA

CPE configurations NVD · 49

CPEVersionsRoleVendor
cpe:2.3:a:lenovo:active_protection_system:1.00b:*:*:*:*:*:*:*1.00bVulnerableLenovo
cpe:2.3:a:lenovo:active_protection_system:1.01b:*:*:*:*:*:*:*1.01bVulnerableLenovo
cpe:2.3:a:lenovo:active_protection_system:1.20b:*:*:*:*:*:*:*1.20bVulnerableLenovo
cpe:2.3:a:lenovo:active_protection_system:1.21:*:*:*:*:*:*:*1.21VulnerableLenovo
cpe:2.3:a:lenovo:active_protection_system:1.22:*:*:*:*:*:*:*1.22VulnerableLenovo
cpe:2.3:a:lenovo:active_protection_system:1.23:*:*:*:*:*:*:*1.23VulnerableLenovo
cpe:2.3:a:lenovo:active_protection_system:1.30b:*:*:*:*:*:*:*1.30bVulnerableLenovo
cpe:2.3:a:lenovo:active_protection_system:1.31:*:*:*:*:*:*:*1.31VulnerableLenovo
cpe:2.3:a:lenovo:active_protection_system:1.32:*:*:*:*:*:*:*1.32VulnerableLenovo
cpe:2.3:a:lenovo:active_protection_system:1.33b:*:*:*:*:*:*:*1.33bVulnerableLenovo
  • cpe:2.3:a:lenovo:active_protection_system:1.00b:*:*:*:*:*:*:* Versions 1.00b Vulnerable ·Lenovo
  • cpe:2.3:a:lenovo:active_protection_system:1.01b:*:*:*:*:*:*:* Versions 1.01b Vulnerable ·Lenovo
  • cpe:2.3:a:lenovo:active_protection_system:1.20b:*:*:*:*:*:*:* Versions 1.20b Vulnerable ·Lenovo
  • cpe:2.3:a:lenovo:active_protection_system:1.21:*:*:*:*:*:*:* Versions 1.21 Vulnerable ·Lenovo
  • cpe:2.3:a:lenovo:active_protection_system:1.22:*:*:*:*:*:*:* Versions 1.22 Vulnerable ·Lenovo
  • cpe:2.3:a:lenovo:active_protection_system:1.23:*:*:*:*:*:*:* Versions 1.23 Vulnerable ·Lenovo
  • cpe:2.3:a:lenovo:active_protection_system:1.30b:*:*:*:*:*:*:* Versions 1.30b Vulnerable ·Lenovo
  • cpe:2.3:a:lenovo:active_protection_system:1.31:*:*:*:*:*:*:* Versions 1.31 Vulnerable ·Lenovo
  • cpe:2.3:a:lenovo:active_protection_system:1.32:*:*:*:*:*:*:* Versions 1.32 Vulnerable ·Lenovo
  • cpe:2.3:a:lenovo:active_protection_system:1.33b:*:*:*:*:*:*:* Versions 1.33b Vulnerable ·Lenovo
Show 39 more CPE
CPEVersionsRoleVendor
cpe:2.3:a:lenovo:active_protection_system:1.34:*:*:*:*:*:*:*1.34VulnerableLenovo
cpe:2.3:a:lenovo:active_protection_system:1.40:*:*:*:*:*:*:*1.40VulnerableLenovo
cpe:2.3:a:lenovo:active_protection_system:1.41:*:*:*:*:*:*:*1.41VulnerableLenovo
cpe:2.3:a:lenovo:active_protection_system:1.50:*:*:*:*:*:*:*1.50VulnerableLenovo
cpe:2.3:a:lenovo:active_protection_system:1.51:*:*:*:*:*:*:*1.51VulnerableLenovo
cpe:2.3:a:lenovo:active_protection_system:1.52:*:*:*:*:*:*:*1.52VulnerableLenovo
cpe:2.3:a:lenovo:active_protection_system:1.53:*:*:*:*:*:*:*1.53VulnerableLenovo
cpe:2.3:a:lenovo:active_protection_system:1.54:*:*:*:*:*:*:*1.54VulnerableLenovo
cpe:2.3:a:lenovo:active_protection_system:1.61:*:*:*:*:*:*:*1.61VulnerableLenovo
cpe:2.3:a:lenovo:active_protection_system:1.62:*:*:*:*:*:*:*1.62VulnerableLenovo
cpe:2.3:a:lenovo:active_protection_system:1.63:*:*:*:*:*:*:*1.63VulnerableLenovo
cpe:2.3:a:lenovo:active_protection_system:1.64:*:*:*:*:*:*:*1.64VulnerableLenovo
cpe:2.3:a:lenovo:active_protection_system:1.70:*:*:*:*:*:*:*1.70VulnerableLenovo
cpe:2.3:a:lenovo:active_protection_system:1.71:*:*:*:*:*:*:*1.71VulnerableLenovo
cpe:2.3:a:lenovo:active_protection_system:1.72:*:*:*:*:*:*:*1.72VulnerableLenovo
cpe:2.3:a:lenovo:active_protection_system:1.73:*:*:*:*:*:*:*1.73VulnerableLenovo
cpe:2.3:a:lenovo:active_protection_system:1.74:*:*:*:*:*:*:*1.74VulnerableLenovo
cpe:2.3:a:lenovo:active_protection_system:1.75:*:*:*:*:*:*:*1.75VulnerableLenovo
cpe:2.3:a:lenovo:active_protection_system:1.76:*:*:*:*:*:*:*1.76VulnerableLenovo
cpe:2.3:a:lenovo:active_protection_system:1.77.0.5:*:*:*:*:*:*:*1.77.0.5VulnerableLenovo
cpe:2.3:a:lenovo:active_protection_system:1.77.0.7:*:*:*:*:*:*:*1.77.0.7VulnerableLenovo
cpe:2.3:a:lenovo:active_protection_system:1.77.0.8:*:*:*:*:*:*:*1.77.0.8VulnerableLenovo
cpe:2.3:a:lenovo:active_protection_system:1.77.0.9:*:*:*:*:*:*:*1.77.0.9VulnerableLenovo
cpe:2.3:a:lenovo:active_protection_system:1.77.0.11:*:*:*:*:*:*:*1.77.0.11VulnerableLenovo
cpe:2.3:a:lenovo:active_protection_system:1.77.0.20:*:*:*:*:*:*:*1.77.0.20VulnerableLenovo
cpe:2.3:a:lenovo:active_protection_system:1.77.0.26:*:*:*:*:*:*:*1.77.0.26VulnerableLenovo
cpe:2.3:a:lenovo:active_protection_system:1.78.0.09:*:*:*:*:*:*:*1.78.0.09VulnerableLenovo
cpe:2.3:a:lenovo:active_protection_system:1.78.0.10:*:*:*:*:*:*:*1.78.0.10VulnerableLenovo
cpe:2.3:a:lenovo:active_protection_system:1.78.0.11:*:*:*:*:*:*:*1.78.0.11VulnerableLenovo
cpe:2.3:a:lenovo:active_protection_system:1.79.0.03:*:*:*:*:*:*:*1.79.0.03VulnerableLenovo
cpe:2.3:a:lenovo:active_protection_system:1.80.1.00:*:*:*:*:*:*:*1.80.1.00VulnerableLenovo
cpe:2.3:a:lenovo:active_protection_system:1.80.3.00:*:*:*:*:*:*:*1.80.3.00VulnerableLenovo
cpe:2.3:a:lenovo:active_protection_system:1.80.8.00:*:*:*:*:*:*:*1.80.8.00VulnerableLenovo
cpe:2.3:a:lenovo:active_protection_system:1.80.11.00:*:*:*:*:*:*:*1.80.11.00VulnerableLenovo
cpe:2.3:a:lenovo:active_protection_system:1.81.0.08:*:*:*:*:*:*:*1.81.0.08VulnerableLenovo
cpe:2.3:a:lenovo:active_protection_system:1.82.0.03:*:*:*:*:*:*:*1.82.0.03VulnerableLenovo
cpe:2.3:a:lenovo:active_protection_system:1.82.0.06:*:*:*:*:*:*:*1.82.0.06VulnerableLenovo
cpe:2.3:a:lenovo:active_protection_system:1.82.0.07:*:*:*:*:*:*:*1.82.0.07VulnerableLenovo
cpe:2.3:a:lenovo:active_protection_system:1.82.0.10:*:*:*:*:*:*:*1.82.0.10VulnerableLenovo
  • cpe:2.3:a:lenovo:active_protection_system:1.34:*:*:*:*:*:*:* Versions 1.34 Vulnerable ·Lenovo
  • cpe:2.3:a:lenovo:active_protection_system:1.40:*:*:*:*:*:*:* Versions 1.40 Vulnerable ·Lenovo
  • cpe:2.3:a:lenovo:active_protection_system:1.41:*:*:*:*:*:*:* Versions 1.41 Vulnerable ·Lenovo
  • cpe:2.3:a:lenovo:active_protection_system:1.50:*:*:*:*:*:*:* Versions 1.50 Vulnerable ·Lenovo
  • cpe:2.3:a:lenovo:active_protection_system:1.51:*:*:*:*:*:*:* Versions 1.51 Vulnerable ·Lenovo
  • cpe:2.3:a:lenovo:active_protection_system:1.52:*:*:*:*:*:*:* Versions 1.52 Vulnerable ·Lenovo
  • cpe:2.3:a:lenovo:active_protection_system:1.53:*:*:*:*:*:*:* Versions 1.53 Vulnerable ·Lenovo
  • cpe:2.3:a:lenovo:active_protection_system:1.54:*:*:*:*:*:*:* Versions 1.54 Vulnerable ·Lenovo
  • cpe:2.3:a:lenovo:active_protection_system:1.61:*:*:*:*:*:*:* Versions 1.61 Vulnerable ·Lenovo
  • cpe:2.3:a:lenovo:active_protection_system:1.62:*:*:*:*:*:*:* Versions 1.62 Vulnerable ·Lenovo
  • cpe:2.3:a:lenovo:active_protection_system:1.63:*:*:*:*:*:*:* Versions 1.63 Vulnerable ·Lenovo
  • cpe:2.3:a:lenovo:active_protection_system:1.64:*:*:*:*:*:*:* Versions 1.64 Vulnerable ·Lenovo
  • cpe:2.3:a:lenovo:active_protection_system:1.70:*:*:*:*:*:*:* Versions 1.70 Vulnerable ·Lenovo
  • cpe:2.3:a:lenovo:active_protection_system:1.71:*:*:*:*:*:*:* Versions 1.71 Vulnerable ·Lenovo
  • cpe:2.3:a:lenovo:active_protection_system:1.72:*:*:*:*:*:*:* Versions 1.72 Vulnerable ·Lenovo
  • cpe:2.3:a:lenovo:active_protection_system:1.73:*:*:*:*:*:*:* Versions 1.73 Vulnerable ·Lenovo
  • cpe:2.3:a:lenovo:active_protection_system:1.74:*:*:*:*:*:*:* Versions 1.74 Vulnerable ·Lenovo
  • cpe:2.3:a:lenovo:active_protection_system:1.75:*:*:*:*:*:*:* Versions 1.75 Vulnerable ·Lenovo
  • cpe:2.3:a:lenovo:active_protection_system:1.76:*:*:*:*:*:*:* Versions 1.76 Vulnerable ·Lenovo
  • cpe:2.3:a:lenovo:active_protection_system:1.77.0.5:*:*:*:*:*:*:* Versions 1.77.0.5 Vulnerable ·Lenovo
  • cpe:2.3:a:lenovo:active_protection_system:1.77.0.7:*:*:*:*:*:*:* Versions 1.77.0.7 Vulnerable ·Lenovo
  • cpe:2.3:a:lenovo:active_protection_system:1.77.0.8:*:*:*:*:*:*:* Versions 1.77.0.8 Vulnerable ·Lenovo
  • cpe:2.3:a:lenovo:active_protection_system:1.77.0.9:*:*:*:*:*:*:* Versions 1.77.0.9 Vulnerable ·Lenovo
  • cpe:2.3:a:lenovo:active_protection_system:1.77.0.11:*:*:*:*:*:*:* Versions 1.77.0.11 Vulnerable ·Lenovo
  • cpe:2.3:a:lenovo:active_protection_system:1.77.0.20:*:*:*:*:*:*:* Versions 1.77.0.20 Vulnerable ·Lenovo
  • cpe:2.3:a:lenovo:active_protection_system:1.77.0.26:*:*:*:*:*:*:* Versions 1.77.0.26 Vulnerable ·Lenovo
  • cpe:2.3:a:lenovo:active_protection_system:1.78.0.09:*:*:*:*:*:*:* Versions 1.78.0.09 Vulnerable ·Lenovo
  • cpe:2.3:a:lenovo:active_protection_system:1.78.0.10:*:*:*:*:*:*:* Versions 1.78.0.10 Vulnerable ·Lenovo
  • cpe:2.3:a:lenovo:active_protection_system:1.78.0.11:*:*:*:*:*:*:* Versions 1.78.0.11 Vulnerable ·Lenovo
  • cpe:2.3:a:lenovo:active_protection_system:1.79.0.03:*:*:*:*:*:*:* Versions 1.79.0.03 Vulnerable ·Lenovo
  • cpe:2.3:a:lenovo:active_protection_system:1.80.1.00:*:*:*:*:*:*:* Versions 1.80.1.00 Vulnerable ·Lenovo
  • cpe:2.3:a:lenovo:active_protection_system:1.80.3.00:*:*:*:*:*:*:* Versions 1.80.3.00 Vulnerable ·Lenovo
  • cpe:2.3:a:lenovo:active_protection_system:1.80.8.00:*:*:*:*:*:*:* Versions 1.80.8.00 Vulnerable ·Lenovo
  • cpe:2.3:a:lenovo:active_protection_system:1.80.11.00:*:*:*:*:*:*:* Versions 1.80.11.00 Vulnerable ·Lenovo
  • cpe:2.3:a:lenovo:active_protection_system:1.81.0.08:*:*:*:*:*:*:* Versions 1.81.0.08 Vulnerable ·Lenovo
  • cpe:2.3:a:lenovo:active_protection_system:1.82.0.03:*:*:*:*:*:*:* Versions 1.82.0.03 Vulnerable ·Lenovo
  • cpe:2.3:a:lenovo:active_protection_system:1.82.0.06:*:*:*:*:*:*:* Versions 1.82.0.06 Vulnerable ·Lenovo
  • cpe:2.3:a:lenovo:active_protection_system:1.82.0.07:*:*:*:*:*:*:* Versions 1.82.0.07 Vulnerable ·Lenovo
  • cpe:2.3:a:lenovo:active_protection_system:1.82.0.10:*:*:*:*:*:*:* Versions 1.82.0.10 Vulnerable ·Lenovo

Remediation

  • Fix · CNA Active Protection System (Lenovo Group Ltd.) Fixed in 1.82.0.14

Timeline

  1. 2026-10-02 Threatist record created from CVE-2017-3740
  2. 2026-10-03 Alias added: GHSA-jj4c-v9g6-vg2x

References

Advisory 1

Sources

This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences