Medium severity5.9NVD Advisory· Published Mar 26, 2017· Updated May 13, 2026
CVE-2017-5622
CVE-2017-5622
Description
With OxygenOS before 4.0.3, when a charger is connected to a powered-off OnePlus 3 or 3T device, the platform starts with adbd enabled. Therefore, a malicious charger or a physical attacker can open up, without authorization, an ADB session with the device, in order to further exploit other vulnerabilities and/or exfiltrate sensitive information.
Affected products
1Patches
0No patches discovered yet.
Vulnerability mechanics
AI mechanics synthesis has not run for this CVE yet.
References
2- alephsecurity.com/vulns/aleph-2017004nvdTechnical DescriptionThird Party Advisory
- www.securityfocus.com/bid/97092nvd
News mentions
0No linked articles in our index yet.