Non notée
CVE-2017-3760 The Lenovo Service Framework Android application uses a set of nonsecure credentials when performing integrity…
Description
The Lenovo Service Framework Android application uses a set of nonsecure credentials when performing integrity verification of downloaded applications and/or data. This exposes the application to man-in-the-middle attacks leading to possible remote code execution.
Produits et versions touchés
| Produit | Versions touchées | Corrigé en |
|---|---|---|
| Service Framework application | Versions non publiées |
Autres CVE de Service Framework application
Les 4 CVE de Service Framework application →
CVE-2017-3758
Improper access controls on several Android components in the Lenovo Service Framework application can be exploited to…
Non notée
CVE-2017-3759
The Lenovo Service Framework Android application accepts some responses from the server without proper validation
Non notée
CVE-2017-3761
The Lenovo Service Framework Android application executes some system commands without proper sanitization of external…
Non notée