Vulnerability in Oneplus 3t
CVE-2016-10370
An issue was discovered on OnePlus devices such as the 3T. The OnePlus OTA Updater pushes the signed-OTA image over HTTP without TLS. While it does not allow for installation of arbitrary OTAs (due to the digital signature), it unnecessarily increases the attack surface, and allows for remote exploitation of other vulnerabilities such as CVE-2017-5948, CVE-2017-8850, and CVE-2017-8851.
EPSS: 0.011 (63.5th percentile) — read the EPSS interpretation.
CVSS v3 metric
CVSS v3 base score 7.5 (High). Vector: CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N.
Affected products
- Oneplus Oneplus_3t
- Oneplus Oxygenos
- N/a — versions n/a
Weakness classification (CWE)
Public proof-of-concept exploits
References
- cve@mitre.org (vdb-entry, x_refsource_BID)
- cve@mitre.org (Technical Description, Exploit, Third Party Advisory, x_refsource_MISC)
- cve@mitre.org (x_refsource_MISC, Vendor Advisory)
Frequently asked questions
- What is CVE-2016-10370?
- CVE-2016-10370 is a high-severity vulnerability in Oneplus 3t, classified under Improper Access Control. CVSS score: 7.5/10. Published 2017-05-11.
- How severe is CVE-2016-10370?
- High severity. CVSS v3 base score is 7.5 out of 10.
- Is CVE-2016-10370 known to be exploited?
- 4 public proof-of-concept repositories are indexed. Not currently listed in the CISA KEV catalog.