OnePlus Phone Backdoor: Devices Shipped With Factory App That Can Root Devices

OnePlus 5 Security

But the team proved it can be done without a whole lot effort, which in turn leaves a lot of OnePlus devices vulnerable. This also means that it's possible for any Android app to achieve root using this method, which opens up OP devices to massive security issues.

OnePlus 5, OnePlus 3T, OnePlus 3 and even some OnePlus One units are vulnerable to root without the need to unlock the bootloader.

In this app, the developer has found activity known as "DiagEnabled", if enabled with a specific password, grants the root access.

If it's there, anyone with physical access to your device can exploit EngineerMode to gain root access on your smartphone.

OnePlus has recently accused of collecting a vast amount of sensitive private data from users' smartphones in the past and now, the company has been blamed for leaving a backdoor on its devices that is capable of granting root access.

While it appears OnePlus is responsible for leaving Engineer Mode on its devices, it is not directly responsible for the application itself or the backdoor it creates.

N Korea brands Trump 'warmonger' as his Asia tour moves to Hanoi
The exercises will also involve 11 US Aegis ships and seven South Korean naval vessels, including two Aegis ships. Trump has been working to rally global pressure against North Korea's nuclear weapons program on a trip to Asia.

You can also check if this application is installed on your OnePlus device or not.

On devices with the application present, an attacker could use the easily crackable password to hijack the device and execute malicious code.

This app is a system app made by @Qualcomm and customised by @OnePlus.

This nonetheless raises questions over why is the device shipping with this app (presumably it has just been overlooked) and whether it's available on other Qualcomm devices.

OnePlus was in a bit of hot water earlier this month for collecting user data through OxygenOS and sending it back to the company, a practice it has since stopped.

In a statement to Android Authority, OnePlus said "We securely transmit analytics in two different streams over HTTPS to an Amazon server".

Related News:

  • College Football Player Expelled After Punching Coach In Head

    College Football Player Expelled After Punching Coach In Head

    The TSU offense was on the field when Lee, who did not play in Saturday's game, attacked Greenstone. Lee is a senior who majoring in criminal justice , and had started two games this year.
    Things You Need To Know About The 2019 Corvette ZR1

    Things You Need To Know About The 2019 Corvette ZR1

    There's also a premium grade Bose audio package for savoring the moments when you're just cruising down the highway. Unlike many cars, however, the ZR1 has two optional packs that help improve the aerodynamics of the auto .

    Qualcomm shoots down Broadcom's $103 billion takeover offer

    As of 1650 GMT, Qualcomm shares were up 1.78% to $65.72 each and Broadcom had posted a 0.24% uptick to $265.61 per share. Broadcom has shown its willingness to buy Qualcomm regardless of whether it closes the NXP deal.
  • Military vehicles outside Zimbabwe capital as treason claims fly

    Military vehicles outside Zimbabwe capital as treason claims fly

    His main rivals within the ruling Zanu-PF party are the younger Generation 40 or G40 group, which has Grace Mugabe's support. President Robert Mugabe's ruling party stripped Emmerson Mnangagwa of his vice president post.
    Morocco Has the Best Defense in the World

    Morocco Has the Best Defense in the World

    The Atlas Lions just needed to avoid defeat in order to book their place in Russian Federation , but took all three points. The match witnessed several incidents involving Zaha, Doumbia, Serge Aurier against their opponents as tension heightened.
    Italy fail to reach World Cup after play-off defeat by Sweden

    Italy fail to reach World Cup after play-off defeat by Sweden

    That is the only regret I have and certainly not that I am finishing my career, because time passes and it's only right. Prior to that, they had only missed the first edition of the event in 1930 in Uruguay, which they did not enter.
  • President Trump Strikes Back at 'Short and Fat' Kim Jong Un

    President Trump Strikes Back at 'Short and Fat' Kim Jong Un

    In a stern speech delivered in South Korea's National Assembly on Tuesday, he said: "Do not underestimate us". The statement also referred to Trump as a "dotard", an insulting term for old people who are going senile.
    Patriots TE Martellus Bennett supposedly told teams not to claim him

    Patriots TE Martellus Bennett supposedly told teams not to claim him

    Bennett said he still doesn't know what he's going to do, but he thinks he should still get the surgery. Former Packer Tom Crabtree has not shied away from calling Bennett a "liar" and a "fraud" on Twitter.

    Dana White gives huge update on Conor McGregor's return — UFC News

    The Fertittas turned their $2 million purchase of UFC into a $4.025 billion sale last July to the Hollywood agency WME-IMG. Despite his victory, however, St-Pierre's accomplishment didn't come without a bit of criticism.
  • Russian Federation  posts video game screenshot as 'proof' of USA  helping IS

    Russian Federation posts video game screenshot as 'proof' of USA helping IS

    The ministry is investigating its civil employee who attached a wrong photo to illustrate the ministry's statement on Abu Kamal. To make things worse for Russia's Ministry of Defense, they didn't completely crop out the "development footage" disclaimer.
    Serena Williams Stuns In First Post-Baby Appearance

    Serena Williams Stuns In First Post-Baby Appearance

    Looking incredible, model Gigi wore a stunning gold dress, featuring kimono sleeves and a high neckline. Want all the latest pregnancy and birth announcements, plus celebrity mom blogs? .
    Vodafone sells mobile phone towers in India to American Tower

    Vodafone sells mobile phone towers in India to American Tower

    The deal, which now awaits various regulatory approvals, is expected to be completed next year around March. The standalone tower businesses of Vodafone and Idea comprise a combined portfolio of almost 20,000 towers.


Most liked

New blood pressure guidelines for "silent, deadly health crisis"
High blood pressure accounts for the second largest number of preventable heart disease and stroke deaths, second only to smoking. WECT's Ben Smart is interviewing two cardiologists today to understand what these new heart health guidelines mean for you.

Sergio Aguero hospitalised following Argentina's 4-2 loss to Nigeria
Nigeria's Brown Ideye (L) celebrates after scoring the team's third goal during an worldwide friendly football match between Argentina and Nigeria in Krasnodar on November 14, 2017.

Venezuela defaults on 60 BILLION debt
The ratings agency said the South American nation had failed to make $200m in repayments on its foreign debt. It is the first time in recent years the Venezuela government has exceeded the buffer period on its bonds.

Steelers QB Ben Roethlisberger slams Thursday NFL games
Then he goes on to describe what Thursday is like when a team has just played a game on Sunday and they're scheduled on TNF . You'd never hear this kind of rant, on day one of preparation no less, from Tom Brady about having to play on Thursday.

Potential Fourth Victim of Tampa Serial Killer Found, Police Say
On Oct. 19, 20-year-old Anthony Naiboa, who had autism, was shot and killed just 50 ft. away from where Mitchell had been slain. Officers say Mr Felton was crossing the street to meet someone when a gunman came up behind him and shot him .

FBI Reportedly Launches Probe Into Judge Who Sentenced Meek Mill To Jail
Mack was among about 50 persons to offer support to Mill during an August 18, 2014, probation violation hearing before Brinkley. According to Page Six , the judge who sent Meek to jail is now being investigated by the Federal Bureau of Investigation .

Four People Killed in Northern California Shooting
In addition to the four people killed in the shooting, several people were injured, including children. Three children and an adult are being treated at Enloe Medical Center in Chico, officials said .

Global carbon emissions to rise again in 2017
Atmospheric CO2 concentration reached 403 parts per million in 2016, and is expected to increase by 2.5 ppm in 2017. From 2014 to 2016 global Carbon dioxide emissions from fossil fuels and industry grew hardly at all.

'The Elder Scrolls V: Skyrim VR,' upcoming games
Well Skyrim VR Bundle will provide you a list of 13 PSVR titles to choose your next game from. We simply can't wait for PS4 gamers to experience it like never before.

Trump asked Xi to resolve Ball arrest
Arriving the day after the players were arrested , Trump reportedly raised the players' predicament during his visit to Beijing. Ball, the second son of outspoken and high-profile sports dad, LaVar Ball , is set to begin his freshman season at UCLA.

Competition coming for Uber as Lyft expands to Toronto
In addition to Lyft, another ride-hailing service called Facedrive launched last week in Toronto. Indeed, there have been reports since the start of the year that such plans were imminent.

CI Investments Inc. Acquires 24000 Shares of Brookfield Property Partners LP (BPY)
Investors are a little more bearish on shares of Brookfield Property Partners L lately as shown by the uptick in short interest. The company sells its generation output primarily to public power authorities, load-serving utilities, and industrial users.

JD.com Claims $19 Bln In Sales On Singles' Day
Alibaba also said it had turned 100,000 physical shops around China into "smart stores" for this year's event. The date of November 11 emerged as a counter-cultural antidote to the sentimentality of Valentine's Day.

Delhi government seeks exemptions for odd-even this year
It is empowering to a woman, and neither the NGT nor the Delhi government has any business taking it away from us. As the NGT is to take up the hearing today, there is no show of the lawyer from the Delhi government's side.

Forecast: Chilly Week Ahead With Some Rain
With the cloud cover and the precipitation, it will be raw and quite chilly, with highs struggling to get to the lower 40s. We will have afternoon highs in the upper 70s prior to the front arriving, then will cool down to the mid 50s overnight.