Not rated
CVE-2017-3760 The Lenovo Service Framework Android application uses a set of nonsecure credentials when performing integrity…
Description
The Lenovo Service Framework Android application uses a set of nonsecure credentials when performing integrity verification of downloaded applications and/or data. This exposes the application to man-in-the-middle attacks leading to possible remote code execution.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| Service Framework application | Versions not published |
Other CVEs of Service Framework application
The 4 CVEs of Service Framework application →
CVE-2017-3758
Improper access controls on several Android components in the Lenovo Service Framework application can be exploited to…
Not rated
CVE-2017-3759
The Lenovo Service Framework Android application accepts some responses from the server without proper validation
Not rated
CVE-2017-3761
The Lenovo Service Framework Android application executes some system commands without proper sanitization of external…
Not rated