Power Management Security Vulnerabilities

CVE-1999-0771

The web components of Compaq Management Agents and the Compaq Survey Utility allow a remote attacker to read arbitrary files via a .. (dot dot) attack.

CVE-1999-0772

Denial of service in Compaq Management Agents and the Compaq Survey Utility via a long string sent to port 2301.

CVE-2017-3741

In the Lenovo Power Management driver before 1.67.12.24, a local user may alter the trackpoint's firmware and stop the trackpoint from functioning correctly. This issue only affects ThinkPad X1 Carbon 5th generation.