CVE-2017-5622

CVE-2017-5622 is a medium-severity vulnerability affecting OnePlus 3 and 3T devices running OxygenOS before version 4.0.3. When a charger is connected to a powered-off device, the Android Debug Bridge (ADB) is unintentionally enabled, allowing a physical attacker or malicious charger to establish an unauthorized ADB session. This provides high impact for confidentiality and integrity, as an attacker could exfiltrate sensitive data or exploit further vulnerabilities. There is no evidence of active exploitation, nor are there publicly available exploit tools like Metasploit or ExploitDB, though it has received some community discussion.