Lenovo Service Framework Vulnerability in Android Application
CVE-2017-3759
8.1HIGH
Summary
The Lenovo Service Framework Android application is susceptible to a vulnerability where it fails to properly validate responses from the server. This lack of validation allows attackers to potentially exploit the application through man-in-the-middle attacks, leading to unauthorized remote code execution. Proper implementation of validation mechanisms is crucial to secure communications and safeguard user data from malicious exploitation.
Affected Version(s)
Service Framework application various versions
References
CVSS V3.1
Score:
8.1
Severity:
HIGH
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Network
Attack Complexity:
High
Privileges Required:
None
User Interaction:
None
Scope:
Unchanged
Timeline
Vulnerability published
Vulnerability Reserved