CVE-2017-5625

EUVD-2017-14722
In OxygenOS before 4.0.3 on OnePlus 3 and 3T devices, an unauthorized attacker can cause a locked bootloader to partially dump the ciphertext content of an arbitrary partition (except 'keystore') by issuing the 'fastboot oem dump <partition>' fastboot command.
ProviderTypeBase ScoreAtk. VectorAtk. ComplexityPriv. RequiredVector
NISTPrimary
4.6 MEDIUM
PHYSICAL
LOW
NONE
CVSS:3.0/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
Base Score
CVSS 3.x
EPSS Score
Percentile: 23%
Affected Products (NVD)
VendorProductVersion
oneplusoxygenos
𝑥
≤ 4.0.2
𝑥
= Vulnerable software versions
Common Weakness Enumeration
References
https://alephsecurity.com/vulns/aleph-2017006
https://alephsecurity.com/vulns/aleph-2017006