CWE Code: 78
Vulnerability Type: privilege_escalation
CVSS Score: 7.2
CWE Name:  Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')
Summary: the leagoo p1 android device with a build fingerprint of sp7731c_1h10_32v4_bird:6.0/mra58k/android.20170629.214736:user/release-keys contains a hidden root privilege escalation capability to achieve command execution as the root user. they have made modifications that allow a user with physical access to the device to obtain a root shell via adb by modifying read-only system properties at runtime. specifically, modifying the ro.debuggable and the ro.secure system properties to a certain value and then restarting the adb daemon allows for a root shell to be obtained via adb.
Access Authentication: NONE
Access Complexity: LOW
Access Vector: LOCAL
Impact (C/I/A): COMPLETE/COMPLETE/COMPLETE
Published Date: 2018-12-28
Last Modified Date: 2019-10-03