Published: 12/05/2017 Updated: 06/09/2017

CVSS v2 Base Score: 9.3 | Impact Score: 10 | Exploitability Score: 8.6

CVSS v3 Base Score: 7.8 | Impact Score: 5.9 | Exploitability Score: 1.8

VMScore: 936

Vector: AV:N/AC:M/Au:N/C:C/I:C/A:C

An elevation of privilege vulnerability in the Motorola bootloader could enable a local malicious application to execute arbitrary code within the context of the bootloader. This issue is rated as Critical due to the possibility of a local permanent device compromise, which may require reflashing the operating system to repair the device. Product: Android. Versions: Kernel-3.10, Kernel-3.18. Android ID: A-33840490.

Vulnerable Product	Search on Vulmon	Subscribe to Product
linux linux kernel 3.18
linux linux kernel 3.10

Sources: alephsecuritycom/2017/08/30/untethered-initroot/ githubcom/alephsecurity/initroot initroot: Motorola Bootloader Kernel Cmdline Injection Secure Boot & Device Locking Bypass (CVE-2016-10277) By Roee Hay / Aleph Research, HCL Technologies Recap of the Vulnerability and the Tethered-jailbreak 1 Vulnerable versions o ...

Motorola Untethered Jailbreak: Exploiting CVE-2016-10277 for Secure Boot and Device Locking bypass

initroot: Motorola Bootloader Kernel Cmdline Injection Secure Boot & Device Locking Bypass (CVE-2016-10277) By Roee Hay / Aleph Research, HCL Technologies First stage exploit: Tethered jailbreak This exploit gains an ephemeral unrestricted root access on the device For example, on cedric (some messages were removed for readability): $ cd /tethered/cedric $ /initroot-

Exploiting CVE-2016-10277 for Secure Boot and Device Locking bypass

Exploiting CVE-2016-10277 More information at: alephsecuritycom/2017/06/07/initroot-moto/ If you just want to check if your device is vulnerable, it might be quicker if you just flash stock ramdisk (without any modifications) If it's your case, just look for initroot-*-STOCK*cpiogz Motorola XT-1033 Scratch Address: 0x11000000 Padding: 64MB Stockrom padded ram

edlrooter By Roee Hay (@roeehay), Aleph Research adb shell -> root exploit for Google Nexus 6 using a leaked Qualcomm Emergency Download (EDL) Mode programmer Exploits CVE-2017-13174 for downgrading ABOOT to a CVE-2016-10277 (initroot susceptible version) Please note: Google could not reproduce our PoC (getting into EDL) Our test device has a relocked bootloader Mor

CWE-264 https://source.android.com/security/bulletin/2017-05-01 http://www.securityfocus.com/bid/98149 https://www.exploit-db.com/exploits/42601/https://nvd.nist.gov https://www.exploit-db.com/exploits/42601/https://github.com/alephsecurity/initroot

CVE-2016-10277

Vulnerability Summary

Vulnerability Trend

Exploits

Github Repositories

References

Vulmon Search

About

Products

Connect