CVE-2017-3750

Status: ModifiedMedium (6.4)—
Severity6.4Medium · CVSS 3.0
Exploitation probability0.14 %higher than 3% of CVEs
Active exploitationNonot in the CISA catalog
Public exploitNot knownno public code found

On Lenovo VIBE mobile phones, the Lenovo Security Android application allows private data to be backed up and restored via Android Debug Bridge, which allows tampering leading to privilege escalation in conjunction with CVE-2017-3748 and CVE-2017-3749.

CVSS

Base score
6.4
Version
3.0
Vector
CVSS:3.0/AV:P/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H

Exploitation probability (EPSS)

Probability of exploitation in the next 30 days
0.14 %
Percentile among all scored CVEs
3
Score date
10/23/2026

EPSS (Exploit Prediction Scoring System, FIRST) estimates how likely a vulnerability is to be exploited in the wild within 30 days. It complements CVSS (impact) and CISA KEV (confirmed exploitation).

Affected technologies (1)

CWEs

References

Show 2 references

Raw JSON (NVD)

Show
{
  "id": "CVE-2017-3750",
  "cveTags": [],
  "metrics": {
    "cvssMetricV2": [
      {
        "type": "Primary",
        "source": "nvd@nist.gov",
        "cvssData": {
          "version": "2.0",
          "baseScore": 6.9,
          "accessVector": "LOCAL",
          "vectorString": "AV:L/AC:M/Au:N/C:C/I:C/A:C",
          "authentication": "NONE",
          "integrityImpact": "COMPLETE",
          "accessComplexity": "MEDIUM",
          "availabilityImpact": "COMPLETE",
          "confidentialityImpact": "COMPLETE"
        },
        "acInsufInfo": false,
        "impactScore": 10,
        "baseSeverity": "MEDIUM",
        "obtainAllPrivilege": false,
        "exploitabilityScore": 3.4,
        "obtainUserPrivilege": false,
        "obtainOtherPrivilege": false,
        "userInteractionRequired": false
      }
    ],
    "cvssMetricV30": [
      {
        "type": "Primary",
        "source": "nvd@nist.gov",
        "cvssData": {
          "scope": "UNCHANGED",
          "version": "3.0",
          "baseScore": 6.4,
          "attackVector": "PHYSICAL",
          "baseSeverity": "MEDIUM",
          "vectorString": "CVSS:3.0/AV:P/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H",
          "integrityImpact": "HIGH",
          "userInteraction": "NONE",
          "attackComplexity": "HIGH",
          "availabilityImpact": "HIGH",
          "privilegesRequired": "NONE",
          "confidentialityImpact": "HIGH"
        },
        "impactScore": 5.9,
        "exploitabilityScore": 0.5
      }
    ]
  },
  "affected": [
    {
      "source": "psirt@lenovo.com",
      "affectedData": [
        {
          "vendor": "Lenovo Group Ltd.",
          "product": "Lenovo Vibe and Lenovo China-only Moto Mobile Phones",
          "versions": [
            {
              "status": "affected",
              "version": "Earlier than 6.0"
            }
          ]
        }
      ]
    }
  ],
  "published": "2017-06-29T15:29:00.253",
  "references": [
    {
      "url": "https://support.lenovo.com/us/en/product_security/LEN-15823",
      "tags": [
        "Mitigation",
        "Vendor Advisory"
      ],
      "source": "psirt@lenovo.com"
    },
    {
      "url": "https://support.lenovo.com/us/en/product_security/LEN-15823",
      "tags": [
        "Mitigation",
        "Vendor Advisory"
      ],
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    }
  ],
  "vulnStatus": "Modified",
  "weaknesses": [
    {
      "type": "Primary",
      "source": "nvd@nist.gov",
      "description": [
        {
          "lang": "en",
          "value": "NVD-CWE-noinfo"
        }
      ]
    }
  ],
  "descriptions": [
    {
      "lang": "en",
      "value": "On Lenovo VIBE mobile phones, the Lenovo Security Android application allows private data to be backed up and restored via Android Debug Bridge, which allows tampering leading to privilege escalation in conjunction with CVE-2017-3748 and CVE-2017-3749."
    },
    {
      "lang": "es",
      "value": "En los teléfonos móviles Lenovo VIBE, la aplicación de Android Lenovo Security permite que los datos privados se copien y restauren mediante Android Debug Bridge, lo que permite la falsificación que conduce a un escalado de privilegios junto con CVE-2017-3748 y CVE-2017-3749."
    }
  ],
  "lastModified": "2026-06-17T01:18:51.083",
  "configurations": [
    {
      "nodes": [
        {
          "negate": false,
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:o:google:android:*:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "B349128A-CD08-4B2B-975B-650831183DBE",
              "versionEndIncluding": "5.1.1"
            }
          ],
          "operator": "OR"
        },
        {
          "negate": false,
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:h:lenovo:vibe_a1600:-:*:*:*:*:*:*:*",
              "vulnerable": false,
              "matchCriteriaId": "FF657581-9D69-4310-AE50-BE48CA5D4CB9"
            },
            {
              "criteria": "cpe:2.3:h:lenovo:vibe_a2560:-:*:*:*:*:*:*:*",
              "vulnerable": false,
              "matchCriteriaId": "0CFB6B14-B5BB-48AB-92CB-CF7487512DC5"
            },
            {
              "criteria": "cpe:2.3:h:lenovo:vibe_a2800:-:*:*:*:*:*:*:*",
              "vulnerable": false,
              "matchCriteriaId": "325AC02E-E178-40D9-90D0-4E79843290B9"
            },
            {
              "criteria": "cpe:2.3:h:lenovo:vibe_a2860:-:*:*:*:*:*:*:*",
              "vulnerable": false,
              "matchCriteriaId": "339FC9D6-19B2-4B91-B899-00E5E277B303"
            },
            {
              "criteria": "cpe:2.3:h:lenovo:vibe_a2880:-:*:*:*:*:*:*:*",
              "vulnerable": false,
              "matchCriteriaId": "06D59E67-2F49-4B3F-9437-94C7140BCF31"
            },
            {
              "criteria": "cpe:2.3:h:lenovo:vibe_a3000:-:*:*:*:*:*:*:*",
              "vulnerable": false,
              "matchCriteriaId": "CBBAF531-27D5-44D6-9EEC-BA86172290E8"
            },
            {
              "criteria": "cpe:2.3:h:lenovo:vibe_a3500:-:*:*:*:*:*:*:*",
              "vulnerable": false,
              "matchCriteriaId": "0D7D1D8F-70CB-4B2F-BC7D-1B10E7EB2077"
            },
            {
              "criteria": "cpe:2.3:h:lenovo:vibe_a3600-d:-:*:*:*:*:*:*:*",
              "vulnerable": false,
              "matchCriteriaId": "6F2F72DE-F368-4A03-BFA4-56B9FA4938AF"
            },
            {
              "criteria": "cpe:2.3:h:lenovo:vibe_a3600u:-:*:*:*:*:*:*:*",
              "vulnerable": false,
              "matchCriteriaId": "6401481C-49A1-4886-80B8-E14569D77DA4"
            },
            {
              "criteria": "cpe:2.3:h:lenovo:vibe_a3800-d:-:*:*:*:*:*:*:*",
              "vulnerable": false,
              "matchCriteriaId": "31FDA3C7-BC99-45A5-AE81-46DA8FA579C7"
            },
            {
              "criteria": "cpe:2.3:h:lenovo:vibe_a3900:-:*:*:*:*:*:*:*",
              "vulnerable": false,
              "matchCriteriaId": "65E0F862-F45A-46CA-941A-99ED0FFF4272"
            },
            {
              "criteria": "cpe:2.3:h:lenovo:vibe_a6000:-:*:*:*:*:*:*:*",
              "vulnerable": false,
              "matchCriteriaId": "32979F5A-1DD6-42A9-9E10-E34CFFC96626"
            },
            {
              "criteria": "cpe:2.3:h:lenovo:vibe_a6000-i:-:*:*:*:*:*:*:*",
              "vulnerable": false,
              "matchCriteriaId": "898242F7-7C48-4439-8520-A0680EFD9FCD"
            },
            {
              "criteria": "cpe:2.3:h:lenovo:vibe_a6020i37:-:*:*:*:*:*:*:*",
              "vulnerable": false,
              "matchCriteriaId": "EC57159C-1E88-43AB-A56E-66CA3AD171EE"
            },
            {
              "criteria": "cpe:2.3:h:lenovo:vibe_a6600:-:*:*:*:*:*:*:*",
              "vulnerable": false,
              "matchCriteriaId": "83D6A8C1-E7E2-449F-8F6C-02993935E3CB"
            },
            {
              "criteria": "cpe:2.3:h:lenovo:vibe_a6800:-:*:*:*:*:*:*:*",
              "vulnerable": false,
              "matchCriteriaId": "ADEF9C5D-A634-4E0D-AD7A-7F84BD7EF0CC"
            },
            {
              "criteria": "cpe:2.3:h:lenovo:vibe_k30-e:-:*:*:*:*:*:*:*",
              "vulnerable": false,
              "matchCriteriaId": "72AFFC5D-B159-4A7A-A482-455260883DC2"
            },
            {
              "criteria": "cpe:2.3:h:lenovo:vibe_k30-w-cu:-:*:*:*:*:*:*:*",
              "vulnerable": false,
              "matchCriteriaId": "B75A5EB3-6E3D-42D5-98E5-E0523342C11A"
            },
            {
              "criteria": "cpe:2.3:h:lenovo:vibe_k32c30:-:*:*:*:*:*:*:*",
              "vulnerable": false,
              "matchCriteriaId": "6E8E4082-C625-4CC2-BD8E-3D8DD26FC5F3"
            },
            {
              "criteria": "cpe:2.3:h:lenovo:vibe_k80m:-:*:*:*:*:*:*:*",
              "vulnerable": false,
              "matchCriteriaId": "AECF65FF-B344-446E-B303-BDB58FFC7290"
            }
          ],
          "operator": "OR"
        }
      ],
      "operator": "AND"
    }
  ],
  "sourceIdentifier": "psirt@lenovo.com"
}