0
1
OnePlus Left A Backdoor That Allows Root Access Without Unlocking Bootloader
Another terrible news for OnePlus users.
Just over a month after OnePlus was caught collecting personally identifiable information on its users, the Chinese smartphone company has been found leaving a backdoor on almost all OnePlus handsets.
A Twitter user, who goes by the name « Elliot Anderson » (named after Mr. Robot’s main character), discovered a backdoor (an exploit) in all OnePlus devices running OxygenOS that could allow anyone to obtain root access to the devices.
The application in question is « EngineerMode, » a diagnostic testing application made by Qualcomm for device manufacturers to easily test all hardware components of the device.
This APK comes pre-installed (accidentally left behind) on most OnePlus devices, including OnePlus 2, 3, 3T, and the newly-launched OnePlus 5. We can confirm its existence on the OnePlus 2, 3 and 5.
You can also check if this application is installed on your OnePlus device or not. For this, simply go to settings, open apps, enable show system apps from top right corner menu (three dots) and search for EngineerMode.APK in the list.
If it’s there, anyone with physical access to your device can exploit EngineerMode to gain root access on your smartphone.
EngineerMode has been designed to diagnose issues with GPS, check the root status of the device, perform a series of automated ‘production line’ tests, and many more
To read the original article:
https://thehackernews.com/2017/11/oneplus-root-exploit.html?utm_source=dlvr.it&utm_medium=twitter
