Lenovo Help vulnerabilities

2 CVEs affecting Lenovo Help, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2018-9067, published 2018-07-13.

More from Lenovo.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

• CVE-2018-9067, published 2018-07-13. High severity, CVSS 7.5. EPSS: 1.1% chance of exploitation in the next 30 days. The Lenovo Help Android app versions earlier than 6.1.2.0327 had insufficient access control for some functions which, if exploited, could have led to exposure of approximately 400 email addresses…
• CVE-2017-3776, published 2018-04-19. High severity, CVSS 7.5. EPSS: 1.1% chance of exploitation in the next 30 days. Lenovo Help Android mobile app versions earlier than 6.1.2.0327 allowed information to be transmitted over an HTTP channel, permitting others observing the channel to potentially see this information.