CVE-2017-3748
First published: Thu Jun 29 2017(Updated: )
On Lenovo VIBE mobile phones, improper access controls on the nac_server component can be abused in conjunction with CVE-2017-3749 and CVE-2017-3750 to elevate privileges to the root user (commonly known as 'rooting' or "jail breaking" a device).
Credit: psirt@lenovo.com
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Google Android | <=5.1.1 | |
| Lenovo Vibe A1600 | ||
| Lenovo Vibe A2560 | ||
| Lenovo Vibe A2800 | ||
| Lenovo Vibe A2860 | ||
| Lenovo Vibe A2880 | ||
| Lenovo Vibe A3000 | ||
| Lenovo Vibe A3500 | ||
| Lenovo Vibe A3600-d | ||
| Lenovo Vibe A3600u | ||
| Lenovo Vibe A3800-d | ||
| Lenovo Vibe A3900 | ||
| Lenovo Vibe A6000 | ||
| Lenovo Vibe A6000-i | ||
| Lenovo Vibe A6020i37 | ||
| Lenovo Vibe A6600 | ||
| Lenovo Vibe A6800 | ||
| Lenovo Vibe K30-e | ||
| Lenovo Vibe K30-w-cu | ||
| Lenovo Vibe K32c30 | ||
| Lenovo Vibe K80m |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
- agent/type
- agent/severity
- agent/references
- agent/author
- agent/description
- agent/event
- agent/last-modified-date
- agent/softwarecombine
- agent/first-publish-date
- agent/tags
- collector/nvd-index
- agent/software-canonical-lookup-request
- collector/mitre-cve
- source/MITRE
- vendor/google
- canonical/google android
- version/google android/5.1.1
- vendor/lenovo
- canonical/lenovo vibe a1600
- canonical/lenovo vibe a2560
- canonical/lenovo vibe a2800
- canonical/lenovo vibe a2860
- canonical/lenovo vibe a2880
- canonical/lenovo vibe a3000
- canonical/lenovo vibe a3500
- canonical/lenovo vibe a3600-d
- canonical/lenovo vibe a3600u
- canonical/lenovo vibe a3800-d
- canonical/lenovo vibe a3900
- canonical/lenovo vibe a6000
- canonical/lenovo vibe a6000-i
- canonical/lenovo vibe a6020i37
- canonical/lenovo vibe a6600
- canonical/lenovo vibe a6800
- canonical/lenovo vibe k30-e
- canonical/lenovo vibe k30-w-cu
- canonical/lenovo vibe k32c30
- canonical/lenovo vibe k80m