SF
Product
Service Framework
5
CVEs
0
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 2High 3Medium 0Low 0
Watch
Add Service Framework to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2017-3758 | 9.8 | Oct 17 | Improper access controls on several Android components in the Lenovo Service Framework application can be exploited to enable remote code execution Affected: All versions, or not specified |
| CVE-2017-3761 | 9.8 | Oct 17 | The Lenovo Service Framework Android application executes some system commands without proper sanitization of external input Affected: All versions, or not specified |
| CVE-2017-3759 | 8.1 | Oct 17 | The Lenovo Service Framework Android application accepts some responses from the server without proper validation Affected: All versions, or not specified |
| CVE-2017-3760 | 8.1 | Oct 17 | The Lenovo Service Framework Android application uses a set of nonsecure credentials when performing integrity verification of downloaded applications and/or data Affected: All versions, or not specified |
| CVE-2024-33582 | 7.8 | Oct 11 | A DLL hijack vulnerability was reported in Lenovo Service Framework that could allow a local attacker to execute code with elevated privileges Affected: before 2.5.0.218 |
Showing 5