CVE-2017-3758

CVE-2017-3758: vulnerability in Lenovo Group Ltd. Service Framework application

Published · Updated

Follow this CVE+ Monitor Service Framework application

E-mail alert when it lands in KEV, gets a public PoC or its score goes up.

3Vexday Risk Score

No sign of exploitation. No public exploitation artifact known so far.

ssvc Trackepss 2.7%
Improper access controls on several Android components in the Lenovo Service Framework application can be exploited to enable remote code execution.
Affected products
Lenovo Group Ltd. · Service Framework application
Related CVEs — Lenovo Group Ltd. Service Framework application

In the same product, most dangerous first.

CVE-2017-3761—CVE-2017-3761EPSS 4.2%CVE-2017-3759—CVE-2017-3759EPSS 1.7%CVE-2017-3760—CVE-2017-3760EPSS 0.8%