CVE-2017-3750
First published: Thu Jun 29 2017(Updated: )
On Lenovo VIBE mobile phones, the Lenovo Security Android application allows private data to be backed up and restored via Android Debug Bridge, which allows tampering leading to privilege escalation in conjunction with CVE-2017-3748 and CVE-2017-3749.
Credit: psirt@lenovo.com
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Google Android | <=5.1.1 | |
| Lenovo Vibe A1600 | ||
| Lenovo Vibe A2560 | ||
| Lenovo Vibe A2800 | ||
| Lenovo Vibe A2860 | ||
| Lenovo Vibe A2880 | ||
| Lenovo Vibe A3000 | ||
| Lenovo Vibe A3500 | ||
| Lenovo Vibe A3600-d | ||
| Lenovo Vibe A3600u | ||
| Lenovo Vibe A3800-d | ||
| Lenovo Vibe A3900 | ||
| Lenovo Vibe A6000 | ||
| Lenovo Vibe A6000-i | ||
| Lenovo Vibe A6020i37 | ||
| Lenovo Vibe A6600 | ||
| Lenovo Vibe A6800 | ||
| Lenovo Vibe K30-e | ||
| Lenovo Vibe K30-w-cu | ||
| Lenovo Vibe K32c30 | ||
| Lenovo Vibe K80m |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
- collector/nvd-index
- vendor/google
- canonical/google android
- version/google android/5.1.1
- vendor/lenovo
- canonical/lenovo vibe a1600
- canonical/lenovo vibe a2560
- canonical/lenovo vibe a2800
- canonical/lenovo vibe a2860
- canonical/lenovo vibe a2880
- canonical/lenovo vibe a3000
- canonical/lenovo vibe a3500
- canonical/lenovo vibe a3600-d
- canonical/lenovo vibe a3600u
- canonical/lenovo vibe a3800-d
- canonical/lenovo vibe a3900
- canonical/lenovo vibe a6000
- canonical/lenovo vibe a6000-i
- canonical/lenovo vibe a6020i37
- canonical/lenovo vibe a6600
- canonical/lenovo vibe a6800
- canonical/lenovo vibe k30-e
- canonical/lenovo vibe k30-w-cu
- canonical/lenovo vibe k32c30
- canonical/lenovo vibe k80m