VULNERABILITY INTELLIGENCE
CVE-2017-3749
CVSS score6.4 MEDIUM
EPSS probability0.14%
CISA KEVNot currently listed
Published2017-06-29
Last modified2026-06-17
CVSS vectorCVSS:3.0/AV:P/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H
Description
On Lenovo VIBE mobile phones, the Idea Friend Android application allows private data to be backed up and restored via Android Debug Bridge, which allows tampering leading to privilege escalation in conjunction with CVE-2017-3748 and CVE-2017-3750.
Primary references
- psirt@lenovo.com — Mitigation, Vendor Advisory
- af854a3a-2127-422b-91ae-364da2661108 — Mitigation, Vendor Advisory