CVE-2017-3750

CVE-2017-3750: vulnerability in Lenovo Vibe and Lenovo China-only Moto Mobile…

Published · Updated

Follow this CVE+ Monitor Lenovo Vibe and Lenovo China-only Moto Mobile Phones

E-mail alert when it lands in KEV, gets a public PoC or its score goes up.

3Vexday Risk Score

No sign of exploitation. No public exploitation artifact known so far.

ssvc Trackepss 0.1%
On Lenovo VIBE mobile phones, the Lenovo Security Android application allows private data to be backed up and restored via Android Debug Bridge, which allows tampering leading to privilege escalation in conjunction with CVE-2017-3748 and CVE-2017-3749.
Affected products
Lenovo Group Ltd. · Lenovo Vibe and Lenovo China-only Moto Mobile Phones
Related CVEs — Lenovo Vibe and Lenovo China-only Moto Mobile…

In the same product, most dangerous first.

CVE-2017-3748—CVE-2017-3748EPSS 0.2%CVE-2017-3749—CVE-2017-3749EPSS 0.1%