Multiple OnePlus Products CVE-2016-10370 Man in the Middle Security Bypass Vulnerability
BID:98495
Info
Multiple OnePlus Products CVE-2016-10370 Man in the Middle Security Bypass Vulnerability
| Bugtraq ID: | 98495 |
| Class: | Design Error |
| CVE: |
CVE-2016-10370 |
| Remote: | Yes |
| Local: | No |
| Published: | May 11 2017 12:00AM |
| Updated: | May 23 2017 04:27PM |
| Credit: | Sagi Kedmi |
| Vulnerable: |
OnePlus X 0 OnePlus OxygenOS 4.1.3 OnePlus OxygenOS 4.1.1 OnePlus OxygenOS 4.1 OnePlus OxygenOS 4.0.3 OnePlus OxygenOS 4.0.2 OnePlus OxygenOS 4.0.1 OnePlus One 0 OnePlus HydrogenOS 3.0 OnePlus 3T 0 OnePlus 3 0 OnePlus 2 0 |
| Not Vulnerable: | |
Discussion
Multiple OnePlus Products CVE-2016-10370 Man in the Middle Security Bypass Vulnerability
Multiple OnePlus Products are prone to a security-bypass vulnerability.
Successfully exploiting this issue may allow attackers to bypass certain security restrictions and perform unauthorized actions by conducting a man-in-the-middle attack. This may lead to other attacks.
This issue affects OnePlus devices running OxygenOS 4.1.3 and prior or HydrogenOS 3.0 and prior.
Multiple OnePlus Products are prone to a security-bypass vulnerability.
Successfully exploiting this issue may allow attackers to bypass certain security restrictions and perform unauthorized actions by conducting a man-in-the-middle attack. This may lead to other attacks.
This issue affects OnePlus devices running OxygenOS 4.1.3 and prior or HydrogenOS 3.0 and prior.
Solution / Fix
Multiple OnePlus Products CVE-2016-10370 Man in the Middle Security Bypass Vulnerability
Solution:
Updates are available. Please see the references or vendor advisory for more information.
Solution:
Updates are available. Please see the references or vendor advisory for more information.