[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$fa6Ymf5tos2TZzyOjc4OHf54e1mpeqSBuXzq4E92A0bU":3,"g5a-risk:CVE-2017-3760":113},{"success":4,"data":5,"meta":111},true,{"cveId":6,"title":7,"description":8,"shortDescription":9,"publishedDate":10,"lastModified":11,"cvssScore":12,"cvssVector":13,"cvssMetrics":14,"epssScore":38,"epssPercentile":15,"epssTimeSeries":39,"severity":40,"affectedProducts":41,"affectedProductsCount":47,"references":48,"referencesCount":57,"weaknesses":58,"weaknessesCount":57,"isActivelyExploited":74,"cisaInfo":15,"otxData":15,"relatedBlogPosts":75,"seoMetadata":76,"configurations":101,"relatedVendorCves":109,"notableEvents":110},"CVE-2017-3760","What is CVE-2017-3760?","The Lenovo Service Framework Android application uses a set of nonsecure credentials when performing integrity verification of downloaded applications and\u002For data. This exposes the application to man-in-the-middle attacks leading to possible remote code execution.","The Lenovo Service Framework Android application uses a set of nonsecure credentials when performing integrity verification of downloaded applications and\u002For...","2017-10-17T20:29:00.323","2025-04-20T01:37:25.86",8.1,"CVSS:3.0\u002FAV:N\u002FAC:H\u002FPR:N\u002FUI:N\u002FS:U\u002FC:H\u002FI:H\u002FA:H",{"CVSSMetricV31":15,"CVSSMetricV30":16,"CVSSMetricV2":28,"CVSSMetricV40":15},null,[17],{"Source":18,"Type":19,"CVSSData":20,"ExploitabilityScore":26,"ImpactScore":27},"nvd@nist.gov","Primary",{"Version":21,"VectorString":13,"AttackVector":22,"AttackComplexity":23,"PrivilegesRequired":24,"UserInteraction":24,"Scope":25,"ConfidentialityImpact":23,"IntegrityImpact":23,"AvailabilityImpact":23,"BaseScore":12,"BaseSeverity":23,"ExploitCodeMaturity":15,"RemediationLevel":15,"ReportConfidence":15,"TemporalScore":15,"TemporalSeverity":15,"ConfidentialityRequirement":15,"IntegrityRequirement":15,"AvailabilityRequirement":15,"ModifiedAttackVector":15,"ModifiedAttackComplexity":15,"ModifiedPrivilegesRequired":15,"ModifiedUserInteraction":15,"ModifiedScope":15,"ModifiedConfidentialityImpact":15,"ModifiedIntegrityImpact":15,"ModifiedAvailabilityImpact":15,"EnvironmentalScore":15,"EnvironmentalSeverity":15},"3.0","NETWORK","HIGH","NONE","UNCHANGED",2.2,5.9,[29],{"Source":18,"Type":19,"CVSSData":30,"BaseSeverity":35,"ExploitabilityScore":36,"ImpactScore":37,"ACInsufInfo":15,"ObtainAllPrivilege":15,"ObtainUserPrivilege":15,"ObtainOtherPrivilege":15,"UserInteractionRequired":15},{"Version":31,"VectorString":32,"AccessVector":22,"AccessComplexity":23,"Authentication":24,"ConfidentialityImpact":33,"IntegrityImpact":33,"AvailabilityImpact":33,"BaseScore":34,"BaseSeverity":15,"Exploitability":15,"RemediationLevel":15,"ReportConfidence":15,"TemporalScore":15,"CollateralDamagePotential":15,"TargetDistribution":15,"ConfidentialityRequirement":15,"IntegrityRequirement":15,"AvailabilityRequirement":15,"EnvironmentalScore":15},"2.0","AV:N\u002FAC:H\u002FAu:N\u002FC:P\u002FI:P\u002FA:P","PARTIAL",5.1,"MEDIUM",4.9,6.4,0.0078,[38,38,38,38,38,38,38],"High",[42],{"vendor":43,"product":44,"version":45,"criteria":46,"vulnerable":4},"lenovo","service_framework","-","cpe:2.3:a:lenovo:service_framework:-:*:*:*:*:android:*:*",1,[49,55],{"url":50,"source":51,"tags":52},"https:\u002F\u002Fsupport.lenovo.com\u002Fus\u002Fen\u002Fproduct_security\u002FLEN-15374","Lenovo",[53,54],"Patch","Vendor Advisory",{"url":50,"source":51,"tags":56},[53,54],2,[59,67],{"id":60,"name":61,"description":62,"extendedDescription":63,"status":64,"abstraction":65,"structure":66},"CWE-354","Improper Validation of Integrity Check Value","The product does not validate or incorrectly validates the integrity check values or \"checksums\" of a message. This may prevent it from detecting if the data has been modified or corrupted in transmission.","Improper validation of checksums before use results in an unnecessary risk that can easily be mitigated. The protocol specification describes the algorithm used for calculating the checksum. It is then a simple matter of implementing the calculation and verifying that the calculated checksum and the received checksum match. Improper verification of the calculated checksum and the received checksum can lead to far greater consequences.","Draft","Base","Simple",{"id":68,"name":69,"description":70,"extendedDescription":71,"status":72,"abstraction":73,"structure":66},"CWE-522","Insufficiently Protected Credentials","The product transmits or stores authentication credentials, but it uses an insecure method that is susceptible to unauthorized interception and\u002For retrieval.","","Incomplete","Class",false,[],{"title":77,"metaDescription":78,"keywords":79,"canonicalUrl":80,"structuredData":81},"What is CVE-2017-3760? Vulnerability Analysis | Security Advisory | Precursor Intelligence","Comprehensive analysis of CVE-2017-3760, a high severity cyber security vulnerability from 2017. The Lenovo Service Framework Android application uses a set ...","CVE-2017-3760, CVE-2017-3760 vulnerability, CVE-2017-3760 security, high severity vulnerability, cybersecurity, vulnerability analysis, security advisory, CVE database, threat intelligence, security research, vulnerability assessment, cyber threats, 2017, CVSS score, exploit, patch, remediation, lenovo security, service_framework vulnerability","\u002Fwhat-is\u002Fcve-2017-3760",{"@context":82,"@type":83,"headline":77,"description":78,"datePublished":10,"dateModified":11,"author":84,"publisher":88,"about":92,"mainEntityOfPage":96,"articleSection":99,"keywords":100},"https:\u002F\u002Fschema.org","TechArticle",{"@type":85,"name":86,"url":87},"Organization","Precursor Intelligence","https:\u002F\u002Fprecursorintelligence.com",{"@type":85,"name":86,"url":87,"logo":89},{"@type":90,"url":91},"ImageObject","https:\u002F\u002Fprecursorintelligence.com\u002Fimg\u002Flogos\u002Feplogo.png",{"@type":93,"name":6,"description":94,"additionalType":95},"Thing","Cybersecurity Vulnerability","https:\u002F\u002Fschema.org\u002FSoftwareBug",{"@type":97,"@id":98},"WebPage","https:\u002F\u002Fprecursorintelligence.com\u002Fwhat-is\u002Fcve-2017-3760","Cybersecurity","CVE-2017-3760, CVE-2017-3760 vulnerability, CVE-2017-3760 security, high severity vulnerability, cybersecurity, vulnerability analysis, security advisory, CVE database, threat intelligence, security research",[102],{"Operator":15,"Negate":15,"Nodes":103},[104],{"Operator":105,"Negate":15,"CPEMatch":106},"OR",[107],{"Vulnerable":4,"Criteria":46,"MatchCriteriaID":108,"VersionStartExcluding":15,"VersionStartIncluding":15,"VersionEndExcluding":15,"VersionEndIncluding":15},"4A00A993-C187-471B-B5A4-66B69C86FC6B",[],[],{"lastModified":11,"cacheTime":112,"version":31},1792433356813,{"score":114,"band":115,"action":116,"scoredAt":117},48,"Medium","Plan remediation","2026-10-19T06:54:42.890965+00:00"]