description: The Lenovo Service Framework Android application accepts some responses from the server without proper validation. This exposes the application to man-in-the-middle attacks leading to possible remote code execution.
problem types: Remote code execution
affected:
{
product: Service Framework application
vendor: Lenovo Group Ltd.
versions:
status: affected, version: various versions
}