CVE-2017-17556

5.1MEDIUM

Key Information:

Vendor
HP
Status
Synaptics ToucHPad Driver
Vendor
CVE Published:
15 December 2017

Summary

A debug tool in Synaptics TouchPad drivers allows local users with administrative access to obtain sensitive information about keyboard scan codes by modifying registry keys.

References

https://www.synaptics.com/company/blog/touchpad-security-...
x_refsource_CONFIRM
https://zwclose.github.io/HP-keylogger/
x_refsource_MISC
https://support.hp.com/us-en/document/c05827409
vendor-advisoryx_refsource_HP

CVSS V3.1

Score:
5.1
Severity:
MEDIUM
Confidentiality:
High
Integrity:
Low
Availability:
High
Attack Vector:
Local
Attack Complexity:
Low
Privileges Required:
High
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.