CVE-2017-0554 PoC — Android Telephony 权限许可和访问控制问题漏洞

Source

Associated Vulnerability

Title: Android Telephony 权限许可和访问控制问题漏洞 (CVE-2017-0554)
Description:An elevation of privilege vulnerability in the Telephony component could enable a local malicious application to access capabilities outside of its permission levels. This issue is rated as Moderate because it could be used to gain access to elevated capabilities, which are not normally accessible to a third-party application. Product: Android. Versions: 4.4.4, 5.0.2, 5.1.1, 6.0, 6.0.1, 7.0, 7.1.1. Android ID: A-33815946.

Description

Android Tethering Provisioning Check Bypass (CVE-2017-0554)

Readme

# Tethr

### Android Tethering Provisioning Check Bypass (CVE-2017-0554)

This is the repository for the proof of concept Tethr app which demonstrates [CVE-2017-0554](https://source.android.com/security/bulletin/2017-04-01#eop-in-telephony) to bypass the tether provisioning check on Android prior to version 7.1.2.

## [Informational Blog Post](https://lanrat.com/tethr)

<img alt="Tethr Screenshot" src="https://user-images.githubusercontent.com/164192/34344366-fdcdccc8-e999-11e7-9815-e73f3198db90.png" width="35%">

## [Download Tethr](/build/Tethr.apk?raw=true)

[<img alt="Tethr" src="/src/main/ic_launcher-web.png?raw=true" width="35%">](/build/Tethr.apk?raw=true)

### [Demo Video](https://www.youtube.com/watch?v=yyOTh8Qlfn8)

File Snapshot

Remarks

1. It is advised to access via the original source first.

2. Local POC snapshots are reserved for subscribers — if the original source is unavailable, the local mirror is part of the paid plan.

View subscription plans →