PT-2017-16574 · Oneplus · Oxygenos

Roee Hay · Publicado 2017-01-23 · Atualizado 2019-10-03 · CVE-2017-5554

Positive Technologies (AI Summary)

CVSS v2.0

9.3

Alta

Vetor base

AV:N/AC:M/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions OnePlus 3 and 3T OxygenOS versions prior to 4.0.2

Description An issue was discovered in ABOOT that allows an attacker to reboot the device into fastboot mode without authentication. This can be achieved by either physically pressing the "Volume Up" button during device boot or by issuing the adb reboot bootloader command with ADB access. Once in fastboot mode, the attacker can put the platform's SELinux in permissive mode by issuing the fastboot oem selinux permissive command, severely weakening it.

Recommendations For OnePlus 3 and 3T OxygenOS versions prior to 4.0.2, update to version 4.0.2 or later to resolve the issue. As a temporary workaround, consider restricting physical access to the device and limiting ADB access to trusted sources.

Correção

Improper Authentication

Enumeração de Fraquezas

CWE-287

Identificadores relacionados

CVE-2017-5554

Produtos afetados

Oxygenos

Referências · 5

• https://xda-developers.com/oneplus-33t-bootloader-vulnerability-allows-changing-of-selinux-to-permissive-mode-in-fastboot · Nota
• https://osv.dev/vulnerability/CVE-2017-5554 · Aviso do Fabricante
• https://securityresear.ch/2017/01/11/fastboot-oem-selinux-permissive · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2017-5554 · Nota de Segurança
• http://securityfocus.com/bid/95706 · Nota