2 lines
5.5 KiB
JSON
2 lines
5.5 KiB
JSON
{"affected":[{"affectedData":[{"product":"Lenovo Vibe and Lenovo China-only Moto Mobile Phones","vendor":"Lenovo Group Ltd.","versions":[{"status":"affected","version":"Earlier than 6.0"}]}],"source":"psirt@lenovo.com"}],"configurations":[{"nodes":[{"cpeMatch":[{"criteria":"cpe:2.3:o:google:android:*:*:*:*:*:*:*:*","matchCriteriaId":"B349128A-CD08-4B2B-975B-650831183DBE","versionEndIncluding":"5.1.1","vulnerable":true}],"negate":false,"operator":"OR"},{"cpeMatch":[{"criteria":"cpe:2.3:h:lenovo:vibe_a1600:-:*:*:*:*:*:*:*","matchCriteriaId":"FF657581-9D69-4310-AE50-BE48CA5D4CB9","vulnerable":false},{"criteria":"cpe:2.3:h:lenovo:vibe_a2560:-:*:*:*:*:*:*:*","matchCriteriaId":"0CFB6B14-B5BB-48AB-92CB-CF7487512DC5","vulnerable":false},{"criteria":"cpe:2.3:h:lenovo:vibe_a2800:-:*:*:*:*:*:*:*","matchCriteriaId":"325AC02E-E178-40D9-90D0-4E79843290B9","vulnerable":false},{"criteria":"cpe:2.3:h:lenovo:vibe_a2860:-:*:*:*:*:*:*:*","matchCriteriaId":"339FC9D6-19B2-4B91-B899-00E5E277B303","vulnerable":false},{"criteria":"cpe:2.3:h:lenovo:vibe_a2880:-:*:*:*:*:*:*:*","matchCriteriaId":"06D59E67-2F49-4B3F-9437-94C7140BCF31","vulnerable":false},{"criteria":"cpe:2.3:h:lenovo:vibe_a3000:-:*:*:*:*:*:*:*","matchCriteriaId":"CBBAF531-27D5-44D6-9EEC-BA86172290E8","vulnerable":false},{"criteria":"cpe:2.3:h:lenovo:vibe_a3500:-:*:*:*:*:*:*:*","matchCriteriaId":"0D7D1D8F-70CB-4B2F-BC7D-1B10E7EB2077","vulnerable":false},{"criteria":"cpe:2.3:h:lenovo:vibe_a3600-d:-:*:*:*:*:*:*:*","matchCriteriaId":"6F2F72DE-F368-4A03-BFA4-56B9FA4938AF","vulnerable":false},{"criteria":"cpe:2.3:h:lenovo:vibe_a3600u:-:*:*:*:*:*:*:*","matchCriteriaId":"6401481C-49A1-4886-80B8-E14569D77DA4","vulnerable":false},{"criteria":"cpe:2.3:h:lenovo:vibe_a3800-d:-:*:*:*:*:*:*:*","matchCriteriaId":"31FDA3C7-BC99-45A5-AE81-46DA8FA579C7","vulnerable":false},{"criteria":"cpe:2.3:h:lenovo:vibe_a3900:-:*:*:*:*:*:*:*","matchCriteriaId":"65E0F862-F45A-46CA-941A-99ED0FFF4272","vulnerable":false},{"criteria":"cpe:2.3:h:lenovo:vibe_a6000:-:*:*:*:*:*:*:*","matchCriteriaId":"32979F5A-1DD6-42A9-9E10-E34CFFC96626","vulnerable":false},{"criteria":"cpe:2.3:h:lenovo:vibe_a6000-i:-:*:*:*:*:*:*:*","matchCriteriaId":"898242F7-7C48-4439-8520-A0680EFD9FCD","vulnerable":false},{"criteria":"cpe:2.3:h:lenovo:vibe_a6020i37:-:*:*:*:*:*:*:*","matchCriteriaId":"EC57159C-1E88-43AB-A56E-66CA3AD171EE","vulnerable":false},{"criteria":"cpe:2.3:h:lenovo:vibe_a6600:-:*:*:*:*:*:*:*","matchCriteriaId":"83D6A8C1-E7E2-449F-8F6C-02993935E3CB","vulnerable":false},{"criteria":"cpe:2.3:h:lenovo:vibe_a6800:-:*:*:*:*:*:*:*","matchCriteriaId":"ADEF9C5D-A634-4E0D-AD7A-7F84BD7EF0CC","vulnerable":false},{"criteria":"cpe:2.3:h:lenovo:vibe_k30-e:-:*:*:*:*:*:*:*","matchCriteriaId":"72AFFC5D-B159-4A7A-A482-455260883DC2","vulnerable":false},{"criteria":"cpe:2.3:h:lenovo:vibe_k30-w-cu:-:*:*:*:*:*:*:*","matchCriteriaId":"B75A5EB3-6E3D-42D5-98E5-E0523342C11A","vulnerable":false},{"criteria":"cpe:2.3:h:lenovo:vibe_k32c30:-:*:*:*:*:*:*:*","matchCriteriaId":"6E8E4082-C625-4CC2-BD8E-3D8DD26FC5F3","vulnerable":false},{"criteria":"cpe:2.3:h:lenovo:vibe_k80m:-:*:*:*:*:*:*:*","matchCriteriaId":"AECF65FF-B344-446E-B303-BDB58FFC7290","vulnerable":false}],"negate":false,"operator":"OR"}],"operator":"AND"}],"cveTags":[],"descriptions":[{"lang":"en","value":"On Lenovo VIBE mobile phones, improper access controls on the nac_server component can be abused in conjunction with CVE-2017-3749 and CVE-2017-3750 to elevate privileges to the root user (commonly known as 'rooting' or \"jail breaking\" a device)."},{"lang":"es","value":"En los teléfonos móviles Lenovo VIBE, los controles de acceso incorrectos en el componente nac_server puede emplearse junto con CVE-2017-3749 y CVE-2017-3750 para elevar los privilegios a usuario root (conocido comúnmente como \"rooting\" o \"jail breaking\" de un dispositivo)."}],"id":"CVE-2017-3748","lastModified":"2026-06-17T01:18:50.820","metrics":{"cvssMetricV2":[{"acInsufInfo":false,"baseSeverity":"HIGH","cvssData":{"accessComplexity":"LOW","accessVector":"LOCAL","authentication":"NONE","availabilityImpact":"COMPLETE","baseScore":7.2,"confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","vectorString":"AV:L/AC:L/Au:N/C:C/I:C/A:C","version":"2.0"},"exploitabilityScore":3.9,"impactScore":10.0,"obtainAllPrivilege":false,"obtainOtherPrivilege":false,"obtainUserPrivilege":false,"source":"nvd@nist.gov","type":"Primary","userInteractionRequired":false}],"cvssMetricV30":[{"cvssData":{"attackComplexity":"LOW","attackVector":"LOCAL","availabilityImpact":"HIGH","baseScore":7.8,"baseSeverity":"HIGH","confidentialityImpact":"HIGH","integrityImpact":"HIGH","privilegesRequired":"LOW","scope":"UNCHANGED","userInteraction":"NONE","vectorString":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","version":"3.0"},"exploitabilityScore":1.8,"impactScore":5.9,"source":"nvd@nist.gov","type":"Primary"}]},"published":"2017-06-29T15:29:00.207","references":[{"source":"psirt@lenovo.com","tags":["Third Party Advisory","VDB Entry"],"url":"http://www.securityfocus.com/bid/99295"},{"source":"psirt@lenovo.com","tags":["Mitigation","Vendor Advisory"],"url":"https://support.lenovo.com/us/en/product_security/LEN-15823"},{"source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"],"url":"http://www.securityfocus.com/bid/99295"},{"source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mitigation","Vendor Advisory"],"url":"https://support.lenovo.com/us/en/product_security/LEN-15823"}],"sourceIdentifier":"psirt@lenovo.com","vulnStatus":"Modified","weaknesses":[{"description":[{"lang":"en","value":"NVD-CWE-noinfo"}],"source":"nvd@nist.gov","type":"Primary"}]}
|