Lenovo Service Framework Vulnerability in Android Application
CVE-2017-3759

8.1HIGH

Key Information:

Vendor
Lenovo
Vendor
CVE Published:
17 October 2017

Summary

The Lenovo Service Framework Android application is susceptible to a vulnerability where it fails to properly validate responses from the server. This lack of validation allows attackers to potentially exploit the application through man-in-the-middle attacks, leading to unauthorized remote code execution. Proper implementation of validation mechanisms is crucial to secure communications and safeguard user data from malicious exploitation.

Affected Version(s)

Service Framework application various versions

References

CVSS V3.1

Score:
8.1
Severity:
HIGH
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Network
Attack Complexity:
High
Privileges Required:
None
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.