CVE-2017-3748

N/A

Published: June 29, 2017 at 03:00 PM UTC

Updated: June 17, 2026 at 01:18 AM UTC

21 products affected across 2 vendorsAndroidVibe A1600Vibe A3600-D

Using Lenovo Vibe and Lenovo China-only Moto Mobile Phones by Lenovo Group Ltd.?

Get instant alerts when new vulnerabilities affect Lenovo Vibe and Lenovo China-only Moto Mobile Phones - before attackers find them.

Real-time alertsTrack your software stackFree plan available

Start Free Sign In

Severity

N/A

Exploit prediction

EPSS 0.2%

Description

On Lenovo VIBE mobile phones, improper access controls on the nac_server component can be abused in conjunction with CVE-2017-3749 and CVE-2017-3750 to elevate privileges to the root user (commonly known as 'rooting' or "jail breaking" a device).

Affected

Our own answer: ranges merged, affected separated from platform-only, with confidence and review flags.

Android · Google

95%

v ≤ 5.1.1v < 6.0

Affected range stops below 6.0, so it looks safe — our inference, not a vendor statement

lenovo-vibe-a1600 (environment) · lenovo-vibe-a2560 (environment) · lenovo-vibe-a2800 (environment) · lenovo-vibe-a2860 (environment) · lenovo-vibe-a2880 (environment) · lenovo-vibe-a3000 (environment) · lenovo-vibe-a3500 (environment) · lenovo-vibe-a3600-d (environment) · lenovo-vibe-a3600u (environment) · lenovo-vibe-a3800-d (environment) · lenovo-vibe-a3900 (environment) · lenovo-vibe-a6000 (environment) · lenovo-vibe-a6000-i (environment) · lenovo-vibe-a6020i37 (environment) · lenovo-vibe-a6600 (environment) · lenovo-vibe-a6800 (environment) · lenovo-vibe-k30-e (environment) · lenovo-vibe-k30-w-cu (environment) · lenovo-vibe-k32c30 (environment) · lenovo-vibe-k80m (environment)

Vibe A1600 · Lenovodevice

80%

All versions

Vibe A2560 · Lenovodevice

80%

All versions

Vibe A2800 · Lenovodevice

80%

All versions

Vibe A2860 · Lenovodevice

80%

All versions