CVE-2017-3742

CVE-2017-3742 describes a vulnerability in Lenovo Connect2 versions prior to 4.2.5.4885 for Windows and 4.2.5.3071 for Android, where ad-hoc connection passwords are stored in user-readable locations. This allows an attacker with read access to user contents to intercept file transfers over the Connect2 hotspot. The vulnerability has a CVSS score of 4.8 (Medium), indicating an attack vector requiring adjacent network access and high complexity, with a potential for high confidentiality impact. There is no evidence of active exploitation, public exploit code (Metasploit, Nuclei, ExploitDB), or significant community discussion or media coverage.