CVE-2017-3750 PUBLISHED CVSS 6.400000095367432 MEDIUM

On Lenovo VIBE mobile phones, the Lenovo Security Android application allows private data to be backed up and restored via Android Debug Bridge, which allows tampering leading to privilege escalation in conjunction with CVE-2017-3748 and CVE-2017-3749.

EPSS 0.01% · 2.7th percentile

Risk Scores

CVSS v3.0
6.400000095367432
CVSS:3.0/AV:P/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H
EPSS Score
0.01%
2.7th percentile

Affected Products

VendorProductVersions
Lenovo Group Ltd.Lenovo Vibe and Lenovo China-only Moto Mobile PhonesEarlier than 6.0
googleandroid0

Timeline

References

Open in Interactive Console →