CyberSec.Space Logo
Back to CVE Browser

CVE-2017-5947

MEDIUM
6.8
CVSS Severity Score
EPSS Score0.0610%
EPSS Percentile12.79th
PublishedMar 29, 2018
Last ModifiedNov 21, 2024

Vulnerability Description

An issue was discovered in OnePlus One, X, 2, 3, 3T, and 5 devices with OxygenOS 5.0 and earlier. The attacker can reboot the device into the Qualcomm Emergency Download (EDL) mode through ADB or by using Volume-Up when connected to USB, which in turn could allow for downgrading partitions such as the Android Bootloader.

Affected Platforms (CPE)

💻
Oneplus

Oxygenos

<= 5.0

References & Advisories

🔗 https://alephsecurity.com/vulns/aleph-2017007
🔗 https://alephsecurity.com/vulns/aleph-2017007

Related Vulnerabilities

CVE-2017-56249.8

An issue was discovered in OxygenOS before 4.0.3 for OnePlus 3 and 3T. The attacker can persistently make the (locked) bootloader ...

CVE-2017-56269.8

OxygenOS before version 4.0.2, on OnePlus 3 and 3T, has two hidden fastboot oem commands (4F500301 and 4F500302) that allow the at...

CVE-2017-55548.1

An issue was discovered in ABOOT in OnePlus 3 and 3T OxygenOS before 4.0.2. The attacker can reboot the device into the fastboot m...

CVE-2017-56236.6

An issue was discovered in OxygenOS before 4.1.0 on OnePlus 3 and 3T devices. The attacker can change the bootmode of the device b...