Privilege Escalation via Idea Friend Android Application on Lenovo VIBE Mobile Phones

Privilege Escalation via Idea Friend Android Application on Lenovo VIBE Mobile Phones

CVE-2017-3749 · MEDIUM Severity

AV:L/AC:M/AU:N/C:C/I:C/A:C

On Lenovo VIBE mobile phones, the Idea Friend Android application allows private data to be backed up and restored via Android Debug Bridge, which allows tampering leading to privilege escalation in conjunction with CVE-2017-3748 and CVE-2017-3750.

Learn more about our Cis Benchmark Audit For Google Android.