CVE-2017-3759 | BDVDB-2026-91676 Detail

Lenovo GroupService Framework application

Description#

The Lenovo Service Framework Android application accepts some responses from the server without proper validation. This exposes the application to man-in-the-middle attacks leading to possible remote code execution.

Impact#

No impact statement in the source data.

Weaknesses#

No weakness recorded in the source data.

References#

https://support.lenovo.com/us/en/product_security/LEN-15374

Exploit#

No public exploit known

History#

Version 12017-10-17Record published in the CVE List.
Version 22024-09-16Most recent update recorded in the CVE List.