CVE-2017-5622

MEDIUM Year: 2017
CVSS v3 Score
5.9
Medium
CVSS v2 Score
3.6
Low
Weakness Type
CWE-276
View all →

Vulnerability Description

With OxygenOS before 4.0.3, when a charger is connected to a powered-off OnePlus 3 or 3T device, the platform starts with adbd enabled. Therefore, a malicious charger or a physical attacker can open up, without authorization, an ADB session with the device, in order to further exploit other vulnerabilities and/or exfiltrate sensitive information.

Related Vulnerabilities

CVE-2019-0683

MEDIUM
CVSS:5.9(Medium)

An elevation of privilege vulnerability exists in Active Directory Forest trusts due to a default setting that lets an attacker in the trusting forest request delegation of a TGT for an identity from ...

CWE-2762019

CVE-2024-20921

MEDIUM
CVSS:5.9(Medium)

Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Hotspot). Supported versions that are affected are Oracle Java SE: ...

CWE-2762024

CVE-2024-39347

MEDIUM
CVSS:5.9(Medium)

Incorrect default permissions vulnerability in firewall functionality in Synology Router Manager (SRM) before 1.2.5-8227-11 and 1.3.1-9346-8 allows man-in-the-middle attackers to access highly sensiti...

CWE-2762024

CVE-2024-46544

MEDIUM
CVSS:5.9(Medium)

Incorrect Default Permissions vulnerability in Apache Tomcat Connectors allows local users to view and modify shared memory containing mod_jk configuration which may lead to information disclosure and...

CWE-2762024

CVE-2025-27612

MEDIUM
CVSS:5.9(Medium)

libcontainer is a library for container control. Prior to libcontainer 0.5.3, while creating a tenant container, the tenant builder accepts a list of capabilities to be added in the spec of tenant con...

CWE-2762025

CVE-2022-36439

MEDIUM
CVSS:6.0(Medium)

AsusSoftwareManager.exe in ASUS System Control Interface on ASUS personal computers (running Windows) allows a local user to write into the Temp directory and delete another more privileged file via S...

CWE-2762022