CVE-2017-3761

2017-10-0500:00:00

lenovo

www.cve.org

9.9 High

AI Score

Confidence

High

0.006 Low

EPSS

Percentile

77.9%

JSON

The Lenovo Service Framework Android application executes some system commands without proper sanitization of external input. In certain cases, this could lead to command injection which, in turn, could lead to remote code execution.

CNA Affected

[
  {
    "product": "Service Framework application",
    "vendor": "Lenovo Group Ltd.",
    "versions": [
      {
        "status": "affected",
        "version": "various versions"
      }
    ]
  }
]

References

support.lenovo.com/us/en/product_security/LEN-15374