Details of VAR-201703-0733

ID

VAR-201703-0733

CVE

CVE-2017-5623

TITLE

OnePlus 3 and 3T Run on device OxygenOS Vulnerabilities related to authorization, permissions, and access control

Trust: 0.8

sources: JVNDB: JVNDB-2017-002501

DESCRIPTION

An issue was discovered in OxygenOS before 4.1.0 on OnePlus 3 and 3T devices. The attacker can change the bootmode of the device by issuing the 'fastboot oem boot_mode {rf/wlan/ftm/normal} command' in contradiction to the threat model of Android where the bootloader MUST NOT allow any security-sensitive operation to be run unless the bootloader is unlocked. OnePlus 3 and 3T Run on device OxygenOS Contains vulnerabilities related to authorization, permissions, and access control.Information is obtained, information is altered, and service operation is disrupted (DoS) An attack may be carried out. OnePlus OxygenOS is prone to a local security-bypass vulnerability. An attacker may exploit this issue to bypass certain security restrictions and perform unauthorized actions. Versions prior to OnePlus OxygenOS 4.1.0 are vulnerable

Trust: 1.89

sources: NVD: CVE-2017-5623 // JVNDB: JVNDB-2017-002501 // BID: 97048

AFFECTED PRODUCTS

vendor:	oneplus	model:	oxygenos	scope:	lte	version:	4.0.3	Trust: 1.0
vendor:	oneplus	model:	oxygenos	scope:	lt	version:	4.1.0	Trust: 0.8
vendor:	oneplus	model:	oxygenos	scope:	eq	version:	4.0.3	Trust: 0.6
vendor:	oneplus	model:	oxygenos	scope:	eq	version:	4.0.2	Trust: 0.3
vendor:	oneplus	model:	oxygenos	scope:	eq	version:	4.0.1	Trust: 0.3
vendor:	oneplus	model:	3t	scope:	-	version:	-	Trust: 0.3
vendor:	oneplus	model:	oneplus	scope:	eq	version:	3	Trust: 0.3
vendor:	oneplus	model:	oxygenos	scope:	ne	version:	4.1	Trust: 0.3

sources: BID: 97048 // JVNDB: JVNDB-2017-002501 // CNNVD: CNNVD-201703-833 // NVD: CVE-2017-5623

CVSS

SEVERITY

CVSSV2

CVSSV3

nvd@nist.gov:	CVE-2017-5623
value:	MEDIUM
Trust: 1.0
NVD:	CVE-2017-5623
value:	MEDIUM
Trust: 0.8
CNNVD:	CNNVD-201703-833
value:	MEDIUM
Trust: 0.6

nvd@nist.gov:	CVE-2017-5623
severity:	HIGH
baseScore:	7.2
vectorString:	AV:L/AC:L/AU:N/C:C/I:C/A:C
accessVector:	LOCAL
accessComplexity:	LOW
authentication:	NONE
confidentialityImpact:	COMPLETE
integrityImpact:	COMPLETE
availabilityImpact:	COMPLETE
exploitabilityScore:	3.9
impactScore:	10.0
acInsufInfo:	NONE
obtainAllPrivilege:	NONE
obtainUserPrivilege:	NONE
obtainOtherPrivilege:	NONE
userInteractionRequired:	NONE
version:	2.0
Trust: 1.8

nvd@nist.gov:	CVE-2017-5623
baseSeverity:	MEDIUM
baseScore:	6.6
vectorString:	CVSS:3.0/AV:P/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
attackVector:	PHYSICAL
attackComplexity:	LOW
privilegesRequired:	LOW
userInteraction:	NONE
scope:	UNCHANGED
confidentialityImpact:	HIGH
integrityImpact:	HIGH
availabilityImpact:	HIGH
exploitabilityScore:	0.7
impactScore:	5.9
version:	3.0
Trust: 1.8

sources: JVNDB: JVNDB-2017-002501 // CNNVD: CNNVD-201703-833 // NVD: CVE-2017-5623

PROBLEMTYPE DATA

problemtype:	CWE-269	Trust: 1.0
problemtype:	CWE-264	Trust: 0.8

sources: JVNDB: JVNDB-2017-002501 // NVD: CVE-2017-5623

THREAT TYPE

local

Trust: 0.9

sources: BID: 97048 // CNNVD: CNNVD-201703-833

TYPE

permissions and access control issues

Trust: 0.6

sources: CNNVD: CNNVD-201703-833

CONFIGURATIONS

sources: JVNDB: JVNDB-2017-002501

PATCH

title:	Top Page	url:	https://oneplus.net/	Trust: 0.8
title:	OnePlus 3 and 3T OxygenOS Security vulnerabilities	url:	http://www.cnnvd.org.cn/web/xxk/bdxqById.tag?id=68628	Trust: 0.6

sources: JVNDB: JVNDB-2017-002501 // CNNVD: CNNVD-201703-833

EXTERNAL IDS

db:	NVD	id:	CVE-2017-5623	Trust: 2.7
db:	BID	id:	97048	Trust: 1.9
db:	JVNDB	id:	JVNDB-2017-002501	Trust: 0.8
db:	CNNVD	id:	CNNVD-201703-833	Trust: 0.6

sources: BID: 97048 // JVNDB: JVNDB-2017-002501 // CNNVD: CNNVD-201703-833 // NVD: CVE-2017-5623

REFERENCES

url:	https://alephsecurity.com/vulns/aleph-2017005	Trust: 2.7
url:	http://www.securityfocus.com/bid/97048	Trust: 1.6
url:	http://cve.mitre.org/cgi-bin/cvename.cgi?name=cve-2017-5623	Trust: 0.8
url:	https://nvd.nist.gov/vuln/detail/cve-2017-5623	Trust: 0.8
url:	https://oneplus.net/	Trust: 0.3

sources: BID: 97048 // JVNDB: JVNDB-2017-002501 // CNNVD: CNNVD-201703-833 // NVD: CVE-2017-5623

CREDITS

Roee Hay (@roeehay) of Aleph Research, HCL Technologies

Trust: 0.3

sources: BID: 97048

SOURCES

db:	BID	id:	97048
db:	JVNDB	id:	JVNDB-2017-002501
db:	CNNVD	id:	CNNVD-201703-833
db:	NVD	id:	CVE-2017-5623

LAST UPDATE DATE

2025-04-20T23:38:33.464000+00:00

SOURCES UPDATE DATE

db:	BID	id:	97048	date:	2017-03-29T00:01:00
db:	JVNDB	id:	JVNDB-2017-002501	date:	2017-04-18T00:00:00
db:	CNNVD	id:	CNNVD-201703-833	date:	2019-10-23T00:00:00
db:	NVD	id:	CVE-2017-5623	date:	2025-04-20T01:37:25.860

SOURCES RELEASE DATE

db:	BID	id:	97048	date:	2017-03-17T00:00:00
db:	JVNDB	id:	JVNDB-2017-002501	date:	2017-04-18T00:00:00
db:	CNNVD	id:	CNNVD-201703-833	date:	2017-03-20T00:00:00
db:	NVD	id:	CVE-2017-5623	date:	2017-03-19T20:59:00.170