What’s Vulnerable › Vulnerabilities

CVE-2018-9067

• Severity: high (CVSS 7.5 v3.0)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 1.1% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2018-07-13 · updated 2026-06-17

Description

The Lenovo Help Android app versions earlier than 6.1.2.0327 had insufficient access control for some functions which, if exploited, could have led to exposure of approximately 400 email addresses and 8,500 IMEI.

Affected products

• Lenovo Group Ltd. Help mobile Android app: before 6.1.2.0327 — fixed in 6.1.2.0327

How to fix

Upgrade to a fixed version: Lenovo Group Ltd. Help mobile Android app 6.1.2.0327. Check the vendor advisory for mitigations.

References

• https://support.lenovo.com/us/en/solutions/LEN-21561
• https://support.lenovo.com/us/en/solutions/LEN-21561

Get alerted when CVE-2018-9067 or the next vulnerability affects your stack