Количество 3
Количество 3
CVE-2017-5626
OxygenOS before version 4.0.2, on OnePlus 3 and 3T, has two hidden fastboot oem commands (4F500301 and 4F500302) that allow the attacker to lock/unlock the bootloader, disregarding the 'OEM Unlocking' checkbox, without user confirmation and without a factory reset. This allows for persistent code execution with high privileges (kernel/root) with complete access to user data.
GHSA-4vmj-9vqv-5mj5
OxygenOS before version 4.0.2, on OnePlus 3 and 3T, has two hidden fastboot oem commands (4F500301 and 4F500302) that allow the attacker to lock/unlock the bootloader, disregarding the 'OEM Unlocking' checkbox, without user confirmation and without a factory reset. This allows for persistent code execution with high privileges (kernel/root) with complete access to user data.
BDU:2017-02592
Уязвимость операционной системы OxygenOS устройств OnePlus 3 и 3T, позволяющая нарушителю повысить свои привилегии и раскрыть защищаемую информацию
Уязвимостей на страницу
Уязвимость | CVSS | EPSS | Опубликовано | |
|---|---|---|---|---|
 | CVE-2017-5626 OxygenOS before version 4.0.2, on OnePlus 3 and 3T, has two hidden fastboot oem commands (4F500301 and 4F500302) that allow the attacker to lock/unlock the bootloader, disregarding the 'OEM Unlocking' checkbox, without user confirmation and without a factory reset. This allows for persistent code execution with high privileges (kernel/root) with complete access to user data. | CVSS3: 9.8 | 2% Низкий | почти 9 лет назад |
| GHSA-4vmj-9vqv-5mj5 OxygenOS before version 4.0.2, on OnePlus 3 and 3T, has two hidden fastboot oem commands (4F500301 and 4F500302) that allow the attacker to lock/unlock the bootloader, disregarding the 'OEM Unlocking' checkbox, without user confirmation and without a factory reset. This allows for persistent code execution with high privileges (kernel/root) with complete access to user data. | CVSS3: 9.8 | 2% Низкий | больше 3 лет назад |
 | BDU:2017-02592 Уязвимость операционной системы OxygenOS устройств OnePlus 3 и 3T, позволяющая нарушителю повысить свои привилегии и раскрыть защищаемую информацию | CVSS3: 9.8 | 2% Низкий | почти 9 лет назад |
Уязвимостей на страницу