CVE-2017-3761

9.8 criticalEPSS 4.2%

Critical (9.8) in lenovo service framework. EPSS 4.2% chance of exploitation in the next 30 days.

The Lenovo Service Framework Android application executes some system commands without proper sanitization of external input. In certain cases, this could lead to command injection which, in turn, could lead to remote code execution.

Severity

CVSS 3.0

9.8 critical

CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

EPSS: 4.2% chance of exploitation in the next 30 days; higher than 90% of CVEs (scores of 2026-10-31)
CWE: CWE-78
Published: 2017-10-17
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

Affected

lenovo:service_framework

References

https://support.lenovo.com/us/en/product_security/LEN-15374
https://support.lenovo.com/us/en/product_security/LEN-15374

Check your stack JSON