Medium severity6.6NVD Advisory· Published Mar 19, 2017· Updated May 13, 2026
CVE-2017-5623
CVE-2017-5623
Description
An issue was discovered in OxygenOS before 4.1.0 on OnePlus 3 and 3T devices. The attacker can change the bootmode of the device by issuing the 'fastboot oem boot_mode {rf/wlan/ftm/normal} command' in contradiction to the threat model of Android where the bootloader MUST NOT allow any security-sensitive operation to be run unless the bootloader is unlocked.
Affected products
1Patches
0No patches discovered yet.
Vulnerability mechanics
AI mechanics synthesis has not run for this CVE yet.
References
2- alephsecurity.com/vulns/aleph-2017005nvdExploitTechnical DescriptionThird Party Advisory
- www.securityfocus.com/bid/97048nvd
News mentions
0No linked articles in our index yet.