CVE-2017-3758

Improper access controls on several Android components in the Lenovo Service Framework application can be exploited to enable remote code execution.

Score

CVSS 3.0 9.8 Critical

Status

Modified - psirt@lenovo.com

Published

2017-10-17

Last modified

2024-09-16

Affected products

• Service Framework (Lenovo)
• Service Framework Application (Lenovo Group Ltd.)

References

• https://support.lenovo.com/us/en/product_security/LEN-15374