CVE-2017-0554

EIP tracks 1 public exploit for CVE-2017-0554. PoCs published by lanrat.

AI-analyzed exploit summary This repository contains a functional proof-of-concept Android application that exploits CVE-2017-0554 to bypass tethering provisioning checks on Android versions prior to 7.1.2. The exploit manipulates telephony and connectivity services via reflection to disable and re-enable mobile data, effectively bypassing carrier restrictions.

An elevation of privilege vulnerability in the Telephony component could enable a local malicious application to access capabilities outside of its permission levels. This issue is rated as Moderate because it could be used to gain access to elevated capabilities, which are not normally accessible to a third-party application. Product: Android. Versions: 4.4.4, 5.0.2, 5.1.1, 6.0, 6.0.1, 7.0, 7.1.1. Android ID: A-33815946.