CVE-2017-3758: Lenovo Service Framework

Critical severity, CVSS 9.8. EPSS: 2.7% chance of exploitation in the next 30 days.

Improper access controls on several Android components in the Lenovo Service Framework application can be exploited to enable remote code execution.

Affected products

• Lenovo Service Framework: affected versions not specified

Published 2017-10-17. Last modified 2026-06-17.