Published: 29/03/2018 Updated: 12/08/2021

CVSS v2 Base Score: 4.6 | Impact Score: 6.4 | Exploitability Score: 3.9

CVSS v3 Base Score: 6.8 | Impact Score: 5.9 | Exploitability Score: 0.9

VMScore: 410

Vector: AV:L/AC:L/Au:N/C:P/I:P/A:P

An issue exists in OnePlus One, X, 2, 3, 3T, and 5 devices with OxygenOS 5.0 and previous versions. The attacker can reboot the device into the Qualcomm Emergency Download (EDL) mode through ADB or by using Volume-Up when connected to USB, which in turn could allow for downgrading partitions such as the Android Bootloader.

Vulnerable Product	Search on Vulmon	Subscribe to Product
oneplus oxygenos

a collection of differently important stuff about mobile phones

Android (Stock Google) + GrapheneOS Secure an Android Device Blog Android Security Features Blog Madaidan's Insecurities - Android Blog Madaidan's Insecurities - Mobile Security and Privacy Advice Blog GrapheneOS: a OpenSource privacy and security focused mobile OS with Android app compatibility Blog GrapheneOS community Wiki Insider Attack Resistance Blog Google can

a collection of differently important stuff about mobile phones

Android (Stock Google) + GrapheneOS Secure an Android Device Blog Android Security Features Blog Madaidan's Insecurities - Android Blog Madaidan's Insecurities - Mobile Security and Privacy Advice Blog GrapheneOS: a OpenSource privacy and security focused mobile OS with Android app compatibility Blog GrapheneOS community Wiki Insider Attack Resistance Blog Google can

NVD-CWE-noinfo https://alephsecurity.com/vulns/aleph-2017007 https://nvd.nist.gov https://github.com/beerisgood/Smartphone_Security

CVE-2017-5947

Vulnerability Summary

Vulnerability Trend

Github Repositories

References

Vulmon Search

About

Products

Connect