CVE-2017-3761: OS Command Injection
The Lenovo Service Framework Android application executes some system commands without proper sanitization of external input. In certain cases, this could lead to command injection which, in turn, could lead to remote code execution.
Affected Software
Remediation
Patch Available
Event History
Frequently Asked Questions
What is the severity of CVE-2017-3761?
CVE-2017-3761 is rated as a high severity vulnerability due to the potential for remote code execution.
How do I fix CVE-2017-3761?
To fix CVE-2017-3761, users should update the Lenovo Service Framework to the latest patched version provided by Lenovo.
What are the consequences of exploiting CVE-2017-3761?
Exploiting CVE-2017-3761 could allow an attacker to execute arbitrary commands on the affected Android devices.
Which devices are affected by CVE-2017-3761?
CVE-2017-3761 affects devices running the Lenovo Service Framework application on Android.
Is there a workaround for CVE-2017-3761?
As a workaround for CVE-2017-3761, users should consider uninstalling the Lenovo Service Framework application if not necessary.