GCVE - cpe:2.3:a:lenovo:service_framework:-:*:*:*:*:android:*:*

Approved changes feed: RSS · Atom

cpe:2.3:a:lenovo:service_framework:-:*:*:*:*:android:*:*

part: a version: - update: *

Vendor	Lenovo (`c98ed681-bc65-5c44-8bbb-e0a228f96d0e`)
Product	Service Framework (`13d46c56-7f46-5a78-b8ba-4dacebc9c320`)
Edition	*
Language	*
Software edition	*
Target software	android
Target hardware	*
Other	*
Notes	Imported from NVD CPE 2.0 feed

PURL mappings

PURL	Source	Last updated
No PURL mappings for this CPE yet.

Vulnerability references

Identifier	cpeApplicability	Submitted	db.gcve.eu details	Rationale
`CVE:CVE-2024-33582`	vulnerable	2026-06-08 06:37:31.693493	Details available HIGH (7.8) A DLL hijack vulnerability was reported in Lenovo Service Framework that could allow a local attacker to execute code with elevated privileges. Published: 2024-10-11T15:17:45.232Z Updated: 2024-10-11T16:31:38.222Z Open on db.gcve.eu Reference links https://iknow.lenovo.com.cn/detail/423563	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2017-3761`	vulnerable	2026-06-08 05:09:36.511687	Details available The Lenovo Service Framework Android application executes some system commands without proper sanitization of external input. In certain cases, this could lead to command injection which, in turn, could lead to remote code execution. Published: 2017-10-17T20:00:00.000Z Updated: 2024-09-17T03:29:06.189Z Open on db.gcve.eu Reference links https://support.lenovo.com/us/en/product_security/LEN-15374	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2017-3760`	vulnerable	2026-06-08 05:09:36.511391	Details available The Lenovo Service Framework Android application uses a set of nonsecure credentials when performing integrity verification of downloaded applications and/or data. This exposes the application to man-in-the-middle attacks leading to possible remote code execution. Published: 2017-10-17T20:00:00.000Z Updated: 2024-09-16T23:26:54.261Z Open on db.gcve.eu Reference links https://support.lenovo.com/us/en/product_security/LEN-15374	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2017-3759`	vulnerable	2026-06-08 05:09:36.511058	Details available The Lenovo Service Framework Android application accepts some responses from the server without proper validation. This exposes the application to man-in-the-middle attacks leading to possible remote code execution. Published: 2017-10-17T20:00:00.000Z Updated: 2024-09-16T19:19:06.707Z Open on db.gcve.eu Reference links https://support.lenovo.com/us/en/product_security/LEN-15374	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2017-3758`	vulnerable	2026-06-08 05:09:36.510648	Details available Improper access controls on several Android components in the Lenovo Service Framework application can be exploited to enable remote code execution. Published: 2017-10-17T20:00:00.000Z Updated: 2024-09-16T22:45:00.460Z Open on db.gcve.eu Reference links https://support.lenovo.com/us/en/product_security/LEN-15374	Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.