PT-2017-16076 · Lenovo · Lenovo Connect2

Publicado 2017-07-17 · Atualizado 2017-07-27 · CVE-2017-3742

Positive Technologies (AI Summary)

CVSS v3.1

4.8

Média

Vetor base

AV:A/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N

Name of the Vulnerable Software and Affected Versions Lenovo Connect2 versions prior to 4.2.5.4885 for Windows Lenovo Connect2 versions prior to 4.2.5.3071 for Android

Description The issue allows an attacker with read access to the user's contents to connect to the Connect2 hotspot and access the contents of files being transferred between two systems. This occurs because the password for an ad-hoc connection is stored in a user-readable location.

Recommendations For versions prior to 4.2.5.4885 for Windows, update to version 4.2.5.4885 or later. For versions prior to 4.2.5.3071 for Android, update to version 4.2.5.3071 or later.

Correção

Information Disclosure

Enumeração de Fraquezas

CWE-200

Identificadores relacionados

CVE-2017-3742

Produtos afetados

Lenovo Connect2

Referências · 3

• https://osv.dev/vulnerability/CVE-2017-3742 · Aviso do Fabricante
• https://support.lenovo.com/us/en/product_security/LEN-14398 · Aviso do Fabricante
• https://nvd.nist.gov/vuln/detail/CVE-2017-3742 · Nota de Segurança