{"id":"CVE-2017-3761","state":"PUBLISHED","title":"The Lenovo Service Framework Android application executes some system commands without proper sanitization of external input. In certain cases, this could lead to command injection","description":"The Lenovo Service Framework Android application executes some system commands without proper sanitization of external input. In certain cases, this could lead to command injection which, in turn, could lead to remote code execution.","publishedAt":"2017-10-17T20:00:00.000Z","updatedAt":"2024-09-17T03:29:06.189Z","severity":null,"assigner":"lenovo","products":["Lenovo Group Ltd. Service Framework application"],"affected":[{"vendor":"Lenovo Group Ltd.","product":"Service Framework application","versions":[{"version":"various versions","status":"affected"}]}],"references":["https://support.lenovo.com/us/en/product_security/LEN-15374"],"weaknesses":[],"ingestedAt":"2026-10-29T19:43:42.704Z","source":{"repository":"CVEProject/cvelistV5","path":"cves/2017/3xxx/CVE-2017-3761.json","commit":"556c9d3a8cd17e218bb8e452ba7cd619a384ff47"},"raw":{"dataType":"CVE_RECORD","dataVersion":"5.1","cveMetadata":{"cveId":"CVE-2017-3761","state":"PUBLISHED","datePublished":"2017-10-17T20:00:00.000Z","dateUpdated":"2024-09-17T03:29:06.189Z","assignerShortName":"lenovo","assignerOrgId":"da227ddf-6e25-4b41-b023-0f976dcaca4b","dateReserved":"2016-12-16T00:00:00.000Z"},"containers":{"cna":{"descriptions":[{"lang":"en","value":"The Lenovo Service Framework Android application executes some system commands without proper sanitization of external input. In certain cases, this could lead to command injection which, in turn, could lead to remote code execution."}],"affected":[{"vendor":"Lenovo Group Ltd.","product":"Service Framework application","versions":[{"version":"various versions","status":"affected"}]}],"references":[{"url":"https://support.lenovo.com/us/en/product_security/LEN-15374","tags":["x_refsource_CONFIRM"]}],"problemTypes":[{"descriptions":[{"description":"Remote code execution","lang":"en","type":"text"}]}],"providerMetadata":{"shortName":"lenovo","dateUpdated":"2017-10-17T19:57:01.000Z","orgId":"da227ddf-6e25-4b41-b023-0f976dcaca4b"},"datePublic":"2017-10-05T00:00:00.000Z","x_legacyV4Record":{"CVE_data_meta":{"ASSIGNER":"psirt@lenovo.com","DATE_PUBLIC":"2017-10-05T00:00:00","ID":"CVE-2017-3761","STATE":"PUBLIC"},"affects":{"vendor":{"vendor_data":[{"product":{"product_data":[{"product_name":"Service Framework application","version":{"version_data":[{"version_value":"various versions"}]}}]},"vendor_name":"Lenovo Group Ltd."}]}},"data_format":"MITRE","data_type":"CVE","data_version":"4.0","description":{"description_data":[{"lang":"eng","value":"The Lenovo Service Framework Android application executes some system commands without proper sanitization of external input. In certain cases, this could lead to command injection which, in turn, could lead to remote code execution."}]},"problemtype":{"problemtype_data":[{"description":[{"lang":"eng","value":"Remote code execution"}]}]},"references":{"reference_data":[{"name":"https://support.lenovo.com/us/en/product_security/LEN-15374","refsource":"CONFIRM","url":"https://support.lenovo.com/us/en/product_security/LEN-15374"}]}}},"adp":[{"title":"CVE Program Container","references":[{"url":"https://support.lenovo.com/us/en/product_security/LEN-15374","tags":["x_refsource_CONFIRM","x_transferred"]}],"providerMetadata":{"shortName":"CVE","orgId":"af854a3a-2127-422b-91ae-364da2661108","dateUpdated":"2024-08-05T14:39:41.039Z"}}]}}}