CVE-2017-3749: Medium severity android vulnerability
On Lenovo VIBE mobile phones, the Idea Friend Android application allows private data to be backed up and restored via Android Debug Bridge, which allows tampering leading to privilege escalation in conjunction with CVE-2017-3748 and CVE-2017-3750.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2017-3749?
CVE-2017-3749 is categorized as a medium severity vulnerability that can lead to privilege escalation on affected Lenovo devices.
How do I fix CVE-2017-3749?
To fix CVE-2017-3749, ensure that your Lenovo VIBE mobile device has the latest security patches and updates applied.
Which devices are affected by CVE-2017-3749?
CVE-2017-3749 primarily affects Lenovo VIBE mobile phones running Android versions up to and including 5.1.1.
Can CVE-2017-3749 allow unauthorized access?
Yes, CVE-2017-3749 can enable unauthorized access to private data by exploiting the Android Debug Bridge functionality.
Is there a risk of data tampering with CVE-2017-3749?
Yes, CVE-2017-3749 allows for the possibility of data tampering due to its privilege escalation capability.