CVE-2018-16098
High
Description
In some Lenovo ThinkPads, an unquoted search path vulnerability was found in various versions of the Synaptics Pointing Device driver which could allow unauthorized code execution as a low privilege user.
SeverityHigh
CVSS7.8
Exploit probability—
ProductLenovo Synaptics Thinkpad Ultranav Driver
PublishedJan 24, 2019
First seenJan 24, 2019
How to fix
Sources list no fixed version or patch link for this vulnerability.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| lenovo synaptics_thinkpad_ultranav_driver | 18.0.7.119, 19.5.19.33, 19.0.17.140, 19.3.4.219, 16.2.19.23, 18.1.27.42 | — |
| lenovo thinkpad_helix_firmware | No range specified | — |
| lenovo thiankpad_l430_firmware | No range specified | — |
| lenovo thiankpad_l530_firmware | No range specified | — |
| lenovo thiankpad_p1_firmware | No range specified | — |
| lenovo thiankpad_x1_extreme_firmware | No range specified | — |
| lenovo thiankpad_p50s_firmware | No range specified | — |
| lenovo thiankpad_p51_firmware | No range specified | — |
| lenovo thiankpad_p51s_firmware | No range specified | — |
| lenovo thiankpad_p52s_firmware | No range specified | — |
| lenovo thiankpad_p70_firmware | No range specified | — |
| lenovo thiankpad_s1_yoga_firmware | No range specified | — |
| lenovo thiankpad_s430_firmware | No range specified | — |
| lenovo thiankpad_t420_firmware | No range specified | — |
| lenovo thiankpad_t420i_firmware | No range specified | — |
| lenovo thinkpad_t420s_firmware | No range specified | — |
| lenovo thinkpad_t420si_firmware | No range specified | — |
| lenovo thinkpad_t430s_firmware | No range specified | — |
| lenovo thinkpad_t430i_firmware | No range specified | — |
| lenovo thinkpad_t431s_firmware | No range specified | — |
| lenovo thinkpad_t440_firmware | No range specified | — |
| lenovo thinkpad_t440s_firmware | No range specified | — |
| lenovo thinkpad_t440p_firmware | No range specified | — |
| lenovo thinkpad_t460s_firmware | No range specified | — |
| lenovo thinkpad_t470_firmware | No range specified | — |
| lenovo thinkpad_t470s_firmware | No range specified | — |
| lenovo thinkpad_t520_firmware | No range specified | — |
| lenovo thinkpad_t520i_firmware | No range specified | — |
| lenovo thinkpad_t530_firmware | No range specified | — |
| lenovo thinkpad_t530i_firmware | No range specified | — |
| lenovo thinkpad_t540_firmware | No range specified | — |
| lenovo thinkpad_t540p_firmware | No range specified | — |
| lenovo thinkpad_t550_firmware | No range specified | — |
| lenovo thinkpad_t560_firmware | No range specified | — |
| lenovo thinkpad_t570_firmware | No range specified | — |
| lenovo thinkpad_t580_firmware | No range specified | — |
| lenovo thinkpad_twist_firmware | No range specified | — |
| lenovo thinkpad_s230u_firmware | No range specified | — |
| lenovo thinkpad_w530_firmware | No range specified | — |
| lenovo thinkpad_w540_firmware | No range specified | — |
| lenovo thinkpad_w541_firmware | No range specified | — |
| lenovo thinkpad_w550s_firmware | No range specified | — |
| lenovo thinkpad_x1_carbon_firmware | No range specified | — |
| lenovo thinkpad_x1_yoga_firmware | No range specified | — |
| lenovo thinkpad_x1_firmware | No range specified | — |
| lenovo thinkpad_x1_hybrid_firmware | No range specified | — |
| lenovo thinkpad_x220_firmware | No range specified | — |
| lenovo thinkpad_x220i_firmware | No range specified | — |
| lenovo thinkpad_x220_tablet_firmware | No range specified | — |
| lenovo thinkpad_x230_firmware | No range specified | — |
| lenovo thinkpad_x230i_firmware | No range specified | — |
| lenovo thinkpad_x230_tablet_firmware | No range specified | — |
| lenovo thinkpad_x230i_tablet_firmware | No range specified | — |
| lenovo thinkpad_x230s_firmware | No range specified | — |
| lenovo thinkpad_x240s_firmware | No range specified | — |
| lenovo thinkpad_x240_firmware | No range specified | — |
| lenovo thinkpad_x250_firmware | No range specified | — |
| lenovo thinkpad_x280_firmware | No range specified | — |
| lenovo thinkpad_yoga_11e_firmware | No range specified | — |
Check your version
Choose the product and enter the version you run to see whether it falls in the affected range.
In the Intelligence 360 plan
Attack Surface Management
See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.