7.8

CVE-2017-3748

On Lenovo VIBE mobile phones, improper access controls on the nac_server component can be abused in conjunction with CVE-2017-3749 and CVE-2017-3750 to elevate privileges to the root user (commonly known as 'rooting' or "jail breaking" a device).
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Google ≫ Android Version <= 5.1.1
   Lenovo ≫ Vibe A1600 Version -
   Lenovo ≫ Vibe A2560 Version -
   Lenovo ≫ Vibe A2800 Version -
   Lenovo ≫ Vibe A2860 Version -
   Lenovo ≫ Vibe A2880 Version -
   Lenovo ≫ Vibe A3000 Version -
   Lenovo ≫ Vibe A3500 Version -
   Lenovo ≫ Vibe A3600-d Version -
   Lenovo ≫ Vibe A3600u Version -
   Lenovo ≫ Vibe A3800-d Version -
   Lenovo ≫ Vibe A3900 Version -
   Lenovo ≫ Vibe A6000 Version -
   Lenovo ≫ Vibe A6000-i Version -
   Lenovo ≫ Vibe A6020i37 Version -
   Lenovo ≫ Vibe A6600 Version -
   Lenovo ≫ Vibe A6800 Version -
   Lenovo ≫ Vibe K30-e Version -
   Lenovo ≫ Vibe K30-w-cu Version -
   Lenovo ≫ Vibe K32c30 Version -
   Lenovo ≫ Vibe K80m Version -
Zu dieser CVE wurde keine Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 0.17% 0.06
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
NIST 7.8 1.8 5.9
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
NIST 7.2 3.9 10
AV:L/AC:L/Au:N/C:C/I:C/A:C
Es wurden noch keine Informationen zu CWE veröffentlicht.
http://www.securityfocus.com/bid/99295
Third Party Advisory
VDB Entry
https://support.lenovo.com/us/en/product_security/LEN-15823
Vendor Advisory
Mitigation