Not rated
CVE-2017-3759 The Lenovo Service Framework Android application accepts some responses from the server without proper validation
Description
The Lenovo Service Framework Android application accepts some responses from the server without proper validation. This exposes the application to man-in-the-middle attacks leading to possible remote code execution.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| Service Framework application | Versions not published |
Other CVEs of Service Framework application
The 4 CVEs of Service Framework application →
CVE-2017-3758
Improper access controls on several Android components in the Lenovo Service Framework application can be exploited to…
Not rated
CVE-2017-3760
The Lenovo Service Framework Android application uses a set of nonsecure credentials when performing integrity…
Not rated
CVE-2017-3761
The Lenovo Service Framework Android application executes some system commands without proper sanitization of external…
Not rated