Lenovo Service Framework Android Code Execution Vulnerability (CNVD-2017-32910)

Lenovo Service Framework Android application is a special application for Lenovo products based on the Android platform from China Lenovo Lenovo Company. A security vulnerability exists in the Lenovo Service Framework Android application, which originates from the program failing to properly filt...

Lenovo Service Framework Application Android Component Access Control Error Vulnerability

Lenovo Service Framework application is a Lenovo product-specific framework from Lenovo, China.Android components is one of the Android components. An access control error vulnerability exists in the Android component of the Lenovo Service Framework application. A remote attacker could exploit th...

Lenovo Service Framework Android Remote Code Execution Vulnerability

Lenovo Service Framework Android application is a special application for Lenovo products based on the Android platform from China Lenovo Lenovo Company. A security vulnerability exists in the Lenovo Service Framework Android application, which originates from the program failing to properly...

Lenovo Service Framework Android Code Execution Vulnerability

Lenovo Service Framework Android application is a special application for Lenovo products based on the Android platform from China Lenovo Lenovo Company. A security vulnerability exists in the Lenovo Service Framework Android application, which originates from the program using an insecure set of...

Lenovo VIBE, Moto, and ZUK Mobile Phone Remote Code Execution Vulnerability - Lenovo Support US

No description provided...

CVE-2017-3758

Improper access controls on several Android components in the Lenovo Service Framework application can be exploited to enable remote code execution...

CVE-2017-3761

The Lenovo Service Framework Android application executes some system commands without proper sanitization of external input. In certain cases, this could lead to command injection which, in turn, could lead to remote code execution...

Command injection

The Lenovo Service Framework Android application executes some system commands without proper sanitization of external input. In certain cases, this could lead to command injection which, in turn, could lead to remote code execution...

CVE-2017-3759

The Lenovo Service Framework Android application accepts some responses from the server without proper validation. This exposes the application to man-in-the-middle attacks leading to possible remote code execution...

Remote code execution

The Lenovo Service Framework Android application uses a set of nonsecure credentials when performing integrity verification of downloaded applications and/or data. This exposes the application to man-in-the-middle attacks leading to possible remote code execution...

Improper access control

Improper access controls on several Android components in the Lenovo Service Framework application can be exploited to enable remote code execution...

CVE-2017-3760

The Lenovo Service Framework Android application uses a set of nonsecure credentials when performing integrity verification of downloaded applications and/or data. This exposes the application to man-in-the-middle attacks leading to possible remote code execution...

CVE-2017-3758

Improper access controls on several Android components in the Lenovo Service Framework application can be exploited to enable remote code execution...

CVE-2017-3761

The CVE-2017-3761 entry concerns the Lenovo Service Framework (LSF) Android application, where the component executes system commands with insufficient input sanitization, enabling command injection and remote code execution. Affected scope includes Lenovo Android tablets and certain VIBE/ZUK/Mot...

CVE-2017-3759

The Lenovo Service Framework Android application accepts some responses from the server without proper validation. This exposes the application to man-in-the-middle attacks leading to possible remote code execution...

CVE-2017-3759

The CVE-2017-3759 issue affects the Lenovo Service Framework (LSF) Android application used on Lenovo tablets and select phones. The root cause is that LSF accepts some server responses without proper validation, exposing the app to man-in-the-middle attacks and potential remote code execution. P...

CVE-2017-3761

The Lenovo Service Framework Android application executes some system commands without proper sanitization of external input. In certain cases, this could lead to command injection which, in turn, could lead to remote code execution...

CVE-2017-3760

The CVE-2017-3760 entry concerns the Lenovo Service Framework Android application that uses a set of nonsecure credentials during integrity verification of downloaded apps/data, enabling a Man-in-the-Middle scenario and potential remote code execution. Multiple sources (CNVD, NVD, CVE list, LEN a...

CVE-2017-3758

CVE-2017-3758 affects Lenovo Service Framework (LSF) Android components. The vulnerability stems from improper access controls in Android components within LSF, allowing remote code execution. Public sources detail that LSF is an Android framework used to receive push notifications on Lenovo devi...

CVE-2017-3760

The Lenovo Service Framework Android application uses a set of nonsecure credentials when performing integrity verification of downloaded applications and/or data. This exposes the application to man-in-the-middle attacks leading to possible remote code execution...