Описание
The Lenovo Service Framework Android application accepts some responses from the server without proper validation. This exposes the application to man-in-the-middle attacks leading to possible remote code execution.
Ссылки
- PatchVendor Advisory
- PatchVendor Advisory
Уязвимые конфигурации
Конфигурация 1
cpe:2.3:a:lenovo:service_framework:-:*:*:*:*:android:*:*
EPSS
Процентиль: 80%
0.01425
Низкий
8.1 High
CVSS3
6.8 Medium
CVSS2
Дефекты
CWE-20
Связанные уязвимости
CVSS3: 8.1
github
больше 3 лет назад
The Lenovo Service Framework Android application accepts some responses from the server without proper validation. This exposes the application to man-in-the-middle attacks leading to possible remote code execution.
EPSS
Процентиль: 80%
0.01425
Низкий
8.1 High
CVSS3
6.8 Medium
CVSS2
Дефекты
CWE-20