CVE-2017-3750: Medium severity Google Android vulnerability
Published Jun 29, 2017
·Updated
On Lenovo VIBE mobile phones, the Lenovo Security Android application allows private data to be backed up and restored via Android Debug Bridge, which allows tampering leading to privilege escalation in conjunction with CVE-2017-3748 and CVE-2017-3749.
Affected Software
21 affected components
Google Android<=5.1.1
Lenovo Vibe A1600
Lenovo Vibe A2560
Lenovo Vibe A2800
Lenovo Vibe A2860
Lenovo Vibe A2880
Lenovo Vibe A3000
Lenovo Vibe A3500
Lenovo Vibe A3600-d
Lenovo Vibe A3600u
Lenovo Vibe A3800-d
Lenovo Vibe A3900
Lenovo Vibe A6000
Lenovo Vibe A6000-i
Lenovo Vibe A6020i37
Lenovo Vibe A6600
Lenovo Vibe A6800
Lenovo Vibe K30-e
Lenovo Vibe K30-w-cu
Lenovo Vibe K32c30
Lenovo Vibe K80m
Event History
Jun 29, 2017
CVE Published
via MITRE·03:00 PM
Data Sourced
via MITRE·03:00 PM
DescriptionWeakness
Frequently Asked Questions
1
What is the severity of CVE-2017-3750?
CVE-2017-3750 has a medium severity rating due to its potential for privilege escalation.
2
How does CVE-2017-3750 affect users?
CVE-2017-3750 allows unauthorized access to private data on Lenovo VIBE mobile phones via the Android Debug Bridge.
3
How can I mitigate CVE-2017-3750?
To mitigate CVE-2017-3750, avoid using the Android Debug Bridge on vulnerable devices.
4
Which devices are affected by CVE-2017-3750?
CVE-2017-3750 affects Lenovo VIBE mobile phones running Android versions up to 5.1.1.
5
Is there a patch available for CVE-2017-3750?
Lenovo has provided updates for the Lenovo Security application to address the CVE-2017-3750 vulnerability.