Non notée
CVE-2017-3759 The Lenovo Service Framework Android application accepts some responses from the server without proper validation
Description
The Lenovo Service Framework Android application accepts some responses from the server without proper validation. This exposes the application to man-in-the-middle attacks leading to possible remote code execution.
Produits et versions touchés
| Produit | Versions touchées | Corrigé en |
|---|---|---|
| Service Framework application | Versions non publiées |
Autres CVE de Service Framework application
Les 4 CVE de Service Framework application →
CVE-2017-3758
Improper access controls on several Android components in the Lenovo Service Framework application can be exploited to…
Non notée
CVE-2017-3760
The Lenovo Service Framework Android application uses a set of nonsecure credentials when performing integrity…
Non notée
CVE-2017-3761
The Lenovo Service Framework Android application executes some system commands without proper sanitization of external…
Non notée