CVE-2017-5948 : Security Advisory and Response

A vulnerability affecting various OnePlus models has been identified, allowing for downgrades and potential exploitation of patched vulnerabilities.

Understanding CVE-2017-5948

What is CVE-2017-5948?

The vulnerability exists in the 'updater-script' of OTAs on OnePlus devices, enabling downgrades without proper version validation, potentially granting attackers access to user data.

The Impact of CVE-2017-5948

The vulnerability can be exploited by Man-in-the-Middle attackers during the update process or by physical attackers rebooting the phone into recovery mode.

Technical Details of CVE-2017-5948

Vulnerability Description

The lenient 'updater-script' in OTAs allows downgrades on locked bootloaders without triggering a factory reset, facilitating the exploitation of patched vulnerabilities.

Affected Systems and Versions

OnePlus One, X, 2, 3, and 3T models
OxygenOS and HydrogenOS

Exploitation Mechanism

Man-in-the-Middle (MiTM) attacks targeting the update process
Physical access to reboot the phone into recovery mode and use 'adb sideload'

Mitigation and Prevention

Immediate Steps to Take

Enable 'Secure Start-up' on OnePlus 3/3T models
Ensure updates occur over TLS

Long-Term Security Practices

Regularly update devices
Implement secure boot mechanisms

Patching and Updates

Apply security patches and updates promptly to mitigate the vulnerability.