CVE-2017-3760: High severity lenovo service framework vulnerability
The Lenovo Service Framework Android application uses a set of nonsecure credentials when performing integrity verification of downloaded applications and/or data. This exposes the application to man-in-the-middle attacks leading to possible remote code execution.
Affected Software
Remediation
Patch Available
Event History
Frequently Asked Questions
What is the severity of CVE-2017-3760?
CVE-2017-3760 is classified as a high severity vulnerability due to its potential for man-in-the-middle attacks and remote code execution.
How do I fix CVE-2017-3760?
To mitigate CVE-2017-3760, update the Lenovo Service Framework application to the latest version provided by Lenovo.
Who is affected by CVE-2017-3760?
Users of the Lenovo Service Framework application on Android devices are affected by CVE-2017-3760.
What type of attack can CVE-2017-3760 enable?
CVE-2017-3760 can enable man-in-the-middle attacks, which may lead to unauthorized remote code execution.
What is the cause of CVE-2017-3760?
CVE-2017-3760 is caused by the use of nonsecure credentials for integrity verification within the Lenovo Service Framework.