Not rated
CVE-2017-3761 The Lenovo Service Framework Android application executes some system commands without proper sanitization of external…
Description
The Lenovo Service Framework Android application executes some system commands without proper sanitization of external input. In certain cases, this could lead to command injection which, in turn, could lead to remote code execution.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| Service Framework application | Versions not published |
Other CVEs of Service Framework application
The 4 CVEs of Service Framework application →
CVE-2017-3758
Improper access controls on several Android components in the Lenovo Service Framework application can be exploited to…
Not rated
CVE-2017-3759
The Lenovo Service Framework Android application accepts some responses from the server without proper validation
Not rated
CVE-2017-3760
The Lenovo Service Framework Android application uses a set of nonsecure credentials when performing integrity…
Not rated