CVE-2017-3759
N/A
N/A
Summary
The Lenovo Service Framework Android application accepts some responses from the server without proper validation. This exposes the application to man-in-the-middle attacks leading to possible remote code execution.
Affected Software
| Vendor | Product | Version Range | Status |
|---|---|---|---|
| Lenovo Group Ltd. | Service Framework application | various versions | affected |
Weaknesses
- Remote code execution
ADP Enrichment
CVE Program Container
Additional References
References
Feedback
Was this page helpful?
Glad to hear it! Please tell us how we can improve.
Sorry to hear that. Please tell us how we can improve.