PT-2017-16574 · Oneplus · Oxygenos

Roee Hay · Published 2017-01-23 · Updated 2019-10-03 · CVE-2017-5554

Positive Technologies (AI Summary)

CVSS v2.0

9.3

High

Base vector

AV:N/AC:M/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions OnePlus 3 and 3T OxygenOS versions prior to 4.0.2

Description An issue was discovered in ABOOT that allows an attacker to reboot the device into fastboot mode without authentication. This can be achieved by either physically pressing the "Volume Up" button during device boot or by issuing the adb reboot bootloader command with ADB access. Once in fastboot mode, the attacker can put the platform's SELinux in permissive mode by issuing the fastboot oem selinux permissive command, severely weakening it.

Recommendations For OnePlus 3 and 3T OxygenOS versions prior to 4.0.2, update to version 4.0.2 or later to resolve the issue. As a temporary workaround, consider restricting physical access to the device and limiting ADB access to trusted sources.

Fix

Improper Authentication

Weakness Enumeration

CWE-287

Related Identifiers

CVE-2017-5554

Affected Products

Oxygenos

References · 5

• https://osv.dev/vulnerability/CVE-2017-5554 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2017-5554 · Security Note
• https://xda-developers.com/oneplus-33t-bootloader-vulnerability-allows-changing-of-selinux-to-permissive-mode-in-fastboot · Note
• https://securityresear.ch/2017/01/11/fastboot-oem-selinux-permissive · Note
• http://securityfocus.com/bid/95706 · Note