What’s Vulnerable › Vulnerabilities

CVE-2017-3748

• Severity: high (CVSS 7.8 v3.0)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.2% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2017-06-29 · updated 2026-06-17

Description

On Lenovo VIBE mobile phones, improper access controls on the nac_server component can be abused in conjunction with CVE-2017-3749 and CVE-2017-3750 to elevate privileges to the root user (commonly known as 'rooting' or "jail breaking" a device).

Affected products

• Android: through 5.1.1

References

• http://www.securityfocus.com/bid/99295
• https://support.lenovo.com/us/en/product_security/LEN-15823
• http://www.securityfocus.com/bid/99295
• https://support.lenovo.com/us/en/product_security/LEN-15823

Get alerted when CVE-2017-3748 or the next vulnerability affects your stack