CVE-2017-3748: High severity android vulnerability
On Lenovo VIBE mobile phones, improper access controls on the nacserver component can be abused in conjunction with CVE-2017-3749 and CVE-2017-3750 to elevate privileges to the root user (commonly known as 'rooting' or "jail breaking" a device).
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2017-3748?
CVE-2017-3748 is a high-severity vulnerability that allows unauthorized privilege escalation on Lenovo VIBE mobile phones.
How do I fix CVE-2017-3748?
To fix CVE-2017-3748, it is recommended to apply security updates and patches provided by Lenovo.
Which devices are affected by CVE-2017-3748?
CVE-2017-3748 affects Lenovo VIBE mobile phones running Android versions up to 5.1.1, particularly in conjunction with other vulnerabilities.
What can attackers do by exploiting CVE-2017-3748?
Attackers exploiting CVE-2017-3748 can elevate privileges to the root user, gaining unauthorized access to the device.
Are there any known exploits for CVE-2017-3748?
Yes, CVE-2017-3748 can be abused in combination with CVE-2017-3749 and CVE-2017-3750 to gain higher privileges.