CVE-2017-3761 The Lenovo Service Framework Android application executes some system commands without proper sanitization of external input. In certain cases, this could lead to command injection which, in turn, cou...
CriticalCVSS 9.8
EPSS 4.2%
- Published
- Updated
- Exploit status
- No public exploit known
Description
The Lenovo Service Framework Android application executes some system commands without proper sanitization of external input. In certain cases, this could lead to command injection which, in turn, could lead to remote code execution.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| Lenovo service framework | All versions | No fix listed |
| Lenovo Group Ltd. Service Framework application | = various versions | No fix listed |
References
- support.lenovo.com patch vendor-advisory