CVE-2017-3760 | BDVDB-2026-91677 Detail

Lenovo GroupService Framework application

Description#

The Lenovo Service Framework Android application uses a set of nonsecure credentials when performing integrity verification of downloaded applications and/or data. This exposes the application to man-in-the-middle attacks leading to possible remote code execution.

Impact#

No impact statement in the source data.

Weaknesses#

No weakness recorded in the source data.

References#

https://support.lenovo.com/us/en/product_security/LEN-15374

Exploit#

No public exploit known

History#

Version 12017-10-17Record published in the CVE List.
Version 22024-09-16Most recent update recorded in the CVE List.