CVE-2017-3758: Critical severity lenovo service framework vulnerability
Published Oct 17, 2017
·Updated
Improper access controls on several Android components in the Lenovo Service Framework application can be exploited to enable remote code execution.
Affected Software
1 affected component
Lenovo Service Framework Android
Remediation
Patch Available
Event History
Oct 17, 2017
CVE Published
via MITRE·08:00 PM
Data Sourced
via MITRE·08:00 PM
DescriptionWeakness
Frequently Asked Questions
1
What is the severity of CVE-2017-3758?
CVE-2017-3758 is rated as high severity due to the potential for remote code execution.
2
How do I fix CVE-2017-3758?
To fix CVE-2017-3758, update the Lenovo Service Framework application to the latest available version.
3
What systems are affected by CVE-2017-3758?
CVE-2017-3758 affects devices running the Lenovo Service Framework on Android.
4
What type of attack can exploit CVE-2017-3758?
CVE-2017-3758 can be exploited through improper access controls that allow remote code execution.
5
Is CVE-2017-3758 publicly known?
Yes, CVE-2017-3758 is publicly known and has been documented for awareness and remediation.