{"id":"CVE-2017-3750","aliases":["CLSA-2026-1774138774","EUVD-2017-12867","GHSA-r87q-892p-73wg"],"status":"published","title":"On Lenovo VIBE mobile phones, the Lenovo Security Android application allows private data to be...","description":"On Lenovo VIBE mobile phones, the Lenovo Security Android application allows private data to be backed up and restored via Android Debug Bridge, which allows tampering leading to privilege escalation in conjunction with CVE-2017-3748 and CVE-2017-3749.","severity":{"version":"3.0","score":6.4,"vector":"CVSS:3.0/AV:P/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"medium","assessor":"primary","from":"nvd"},"epss":{"day":"2026-11-07","score":0.00144,"percentile":0.03719,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":true},"published":"2017-06-29T15:00:00Z","modified":"2026-10-15T09:47:00Z","fixes":[{"ecosystem":"TuxCare:npm","package":"deep-extend","fixed_in":["0.2.11-tuxcare.1"],"sources":["osv"]}],"affected":[{"source":"osv","ecosystem":"TuxCare:npm","package":"deep-extend","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0.2.11-tuxcare.0"},{"fixed":"0.2.11-tuxcare.1"}]}],"versions":["0.2.11"]}],"products":[{"vendor":"google","product":"android"},{"vendor":"lenovo group ltd.","product":"lenovo vibe and lenovo china-only moto mobile phones"}],"references":[{"url":"https://support.lenovo.com/us/en/product_security/LEN-15823","tags":["x_refsource_CONFIRM","x_transferred","Mitigation","Vendor Advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2017-3750"},{"url":"https://github.com/advisories/GHSA-r87q-892p-73wg"}],"sources":{"cve":[{"id":"CVE-2017-3750","description":"On Lenovo VIBE mobile phones, the Lenovo Security Android application allows private data to be backed up and restored via Android Debug Bridge, which allows tampering leading to privilege escalation in conjunction with CVE-2017-3748 and CVE-2017-3749.","status":"published","published":"2017-06-29T15:00:00Z","modified":"2024-09-16T22:40:14.066Z","updated_at":"2026-11-02T14:33:16.232024Z"}],"euvd":[{"id":"EUVD-2017-12867","description":"On Lenovo VIBE mobile phones, the Lenovo Security Android application allows private data to be backed up and restored via Android Debug Bridge, which allows tampering leading to privilege escalation in conjunction with CVE-2017-3748 and CVE-2017-3749.","status":"published","published":"2017-06-29T15:00:00Z","modified":"2024-09-16T22:40:14Z","updated_at":"2026-11-03T00:55:01.173561Z"}],"ghsa":[{"id":"GHSA-r87q-892p-73wg","title":"On Lenovo VIBE mobile phones, the Lenovo Security Android application allows private data to be...","description":"On Lenovo VIBE mobile phones, the Lenovo Security Android application allows private data to be backed up and restored via Android Debug Bridge, which allows tampering leading to privilege escalation in conjunction with CVE-2017-3748 and CVE-2017-3749.","status":"published","published":"2022-05-13T01:45:51Z","modified":"2023-02-02T05:01:21Z","cvss":[{"version":"3.0","score":6.4,"vector":"CVSS:3.0/AV:P/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"medium"}],"updated_at":"2026-11-02T14:51:10.253822Z"}],"nvd":[{"id":"CVE-2017-3750","description":"On Lenovo VIBE mobile phones, the Lenovo Security Android application allows private data to be backed up and restored via Android Debug Bridge, which allows tampering leading to privilege escalation in conjunction with CVE-2017-3748 and CVE-2017-3749.","status":"published","published":"2017-06-29T15:29:00.253Z","modified":"2026-06-17T01:18:51.083Z","cvss":[{"version":"3.0","score":6.4,"vector":"CVSS:3.0/AV:P/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"medium","assessor":"primary"},{"version":"2.0","score":6.9,"vector":"AV:L/AC:M/Au:N/C:C/I:C/A:C","level":"medium","assessor":"primary"}],"updated_at":"2026-11-02T14:03:51.893212Z"}],"osv":[{"id":"CLSA-2026-1774138774","title":"TuxCare security update for deep-extend (1 CVE)","description":"TuxCare rebuilt deep-extend to address 1 CVE. Fixed in 0.2.11-tuxcare.1.","status":"published","published":"2026-08-04T14:52:14Z","modified":"2026-10-15T09:47:00.062900646Z","updated_at":"2026-11-02T15:43:43.621843Z"}]}}