What is CVE-2017-3749?

CVE-2017-3749 is a medium-severity vulnerability in Google Android. CVSS score: 6.4/10. Published 2017-06-29.

How severe is CVE-2017-3749?

Medium severity. CVSS v3 base score is 6.4 out of 10.

Vulnerability in Google Android

CVE-2017-3749

On Lenovo VIBE mobile phones, the Idea Friend Android application allows private data to be backed up and restored via Android Debug Bridge, which allows tampering leading to privilege escalation in conjunction with CVE-2017-3748 and CVE-2017-3750.

EPSS: 0.001 (4.0th percentile) — read the EPSS interpretation.

CVSS v3 metric

CVSS v3 base score 6.4 (Medium). Vector: CVSS:3.0/AV:P/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H.

Affected products

Google Android
Lenovo Vibe_a1600
Lenovo Vibe_a2560
Lenovo Vibe_a2800
Lenovo Vibe_a2860
Lenovo Vibe_a2880
Lenovo Vibe_a3000
Lenovo Vibe_a3500
Lenovo Vibe_a3600-d
Lenovo Vibe_a3600u

References

psirt@lenovo.com (x_refsource_CONFIRM, Mitigation, Vendor Advisory)

Frequently asked questions

What is CVE-2017-3749?: CVE-2017-3749 is a medium-severity vulnerability in Google Android. CVSS score: 6.4/10. Published 2017-06-29.
How severe is CVE-2017-3749?: Medium severity. CVSS v3 base score is 6.4 out of 10.