CVE Catalog
CVE-2017-3761
CriticalSummary
The Lenovo Service Framework Android application executes some system commands without proper sanitization of external input. In certain cases, this could lead to command injection which, in turn, could lead to remote code execution.
Risk Assessment
The risk to the organization involves the potential for remote code execution, which could lead to system and data compromise.
Recommendation
It is recommended to update the application to the latest version and implement safeguards against command injection.
Original NVD description (English source)
The Lenovo Service Framework Android application executes some system commands without proper sanitization of external input. In certain cases, this could lead to command injection which, in turn, could lead to remote code execution.