Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-wcj8-ch6c-ccvv

Опубликовано: 17 мая 2022
Источник: github
Github: Не прошло ревью
CVSS3: 8.1

Описание

The Lenovo Service Framework Android application accepts some responses from the server without proper validation. This exposes the application to man-in-the-middle attacks leading to possible remote code execution.

The Lenovo Service Framework Android application accepts some responses from the server without proper validation. This exposes the application to man-in-the-middle attacks leading to possible remote code execution.

EPSS

Процентиль: 80%
0.01425
Низкий

8.1 High

CVSS3

Дефекты

CWE-20

Связанные уязвимости

CVSS3: 8.1
nvd
больше 8 лет назад

The Lenovo Service Framework Android application accepts some responses from the server without proper validation. This exposes the application to man-in-the-middle attacks leading to possible remote code execution.

EPSS

Процентиль: 80%
0.01425
Низкий

8.1 High

CVSS3

Дефекты

CWE-20