CVE-2017-3761

CVE-2017-3761: vulnerability in Lenovo Group Ltd. Service Framework application

Published · Updated

Follow this CVE+ Monitor Service Framework application

E-mail alert when it lands in KEV, gets a public PoC or its score goes up.

3Vexday Risk Score

No sign of exploitation. No public exploitation artifact known so far.

ssvc Trackepss 4.2%
The Lenovo Service Framework Android application executes some system commands without proper sanitization of external input. In certain cases, this could lead to command injection which, in turn, could lead to remote code execution.
Affected products
Lenovo Group Ltd. · Service Framework application
Related CVEs — Lenovo Group Ltd. Service Framework application

In the same product, most dangerous first.

CVE-2017-3758—CVE-2017-3758EPSS 2.7%CVE-2017-3759—CVE-2017-3759EPSS 1.7%CVE-2017-3760—CVE-2017-3760EPSS 0.8%