CVE-2017-3776

Severity: high (CVSS 7.5 v3.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 1.1% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2018-04-19 · updated 2026-06-17
Weakness: CWE-200

Description

Lenovo Help Android mobile app versions earlier than 6.1.2.0327 allowed information to be transmitted over an HTTP channel, permitting others observing the channel to potentially see this information.

Affected products

Lenovo Group Ltd. Help mobile Android app: before 6.1.2.0327 — fixed in 6.1.2.0327

How to fix

Upgrade to a fixed version: Lenovo Group Ltd. Help mobile Android app 6.1.2.0327. Check the vendor advisory for mitigations.

References

https://support.lenovo.com/us/en/product_security/LEN-20475
https://support.lenovo.com/us/en/product_security/LEN-20475

Get alerted when CVE-2017-3776 or the next vulnerability affects your stack