Lenovo Group Ltd. Service Framework Application
4 CVEs affecting Lenovo Group Ltd. Service Framework Application. Latest disclosed: 2017-10-17. Critical: 2, High: 2.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2017-3761 | Critical | 9.8 | 2017-10-17 | The Lenovo Service Framework Android application executes some system commands without proper sanitization of external input. In certain cases, this could lead… |
CVE-2017-3758 | Critical | 9.8 | 2017-10-17 | Improper access controls on several Android components in the Lenovo Service Framework application can be exploited to enable remote code execution. |
CVE-2017-3760 | High | 8.1 | 2017-10-17 | The Lenovo Service Framework Android application uses a set of nonsecure credentials when performing integrity verification of downloaded applications and/or d… |
CVE-2017-3759 | High | 8.1 | 2017-10-17 | The Lenovo Service Framework Android application accepts some responses from the server without proper validation. This exposes the application to man-in-the-m… |