Privilege Escalation Vulnerability in Lenovo VIBE Mobile Phones via Idea Friend App
CVE-2017-3749

6.4MEDIUM

Key Information:

Vendor
Lenovo
Status
Lenovo Vibe And Lenovo China-only Moto Mobile Phones
Vendor
CVE Published:
29 June 2017

Summary

The Idea Friend Android application on Lenovo VIBE mobile phones has a security flaw that enables unauthorized access to private data. This vulnerability allows users to back up and restore data via the Android Debug Bridge (ADB), which can be exploited to manipulate the device’s permissions and escalate privileges. This issue is compounded when viewed alongside other associated vulnerabilities, leading to significant security concerns for users of the affected mobile devices.

Affected Version(s)

Lenovo Vibe and Lenovo China-only Moto Mobile Phones Earlier than 6.0

References

https://support.lenovo.com/us/en/product_security/LEN-15823
x_refsource_CONFIRM

CVSS V3.1

Score:
6.4
Severity:
MEDIUM
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Physical
Attack Complexity:
High
Privileges Required:
None
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.