A critical security flaw (CVE-2025-27387) in OPPO’s Clone Phone feature allows unauthorized data access due to an insecure WiFi implementation.
The vulnerability affects ColorOS 15.0.2 and earlier versions, enabling attackers within proximity to intercept sensitive files during device transfers.
OPPO has classified this as a high-severity issue (CVSS 7.4) and released an advisory acknowledging researcher Florian Draschbacher’s discovery in May 2025.
Technical Vulnerability Analysis
The Clone Phone feature establishes a WiFi hotspot using a weak WPA passphrase as its sole authentication mechanism.
This allows threat actors to:
- Brute-force access to the hotspot due to predictable password patterns
- Intercept unencrypted files during device-to-device transfers
- Bypass security controls without requiring authentication (CVSSv3.1: AV:A/AC:L/PR:N/UI:N/S:C)
The vulnerability stems from CWE-200 (Exposure of Sensitive Information), where data confidentiality is compromised when attackers connect to the vulnerable hotspot.
Successful exploitation requires physical proximity but no user interaction.
Impact Assessment
| Impact Area | Consequence |
|---|---|
| Data Confidentiality | Full compromise (C:H in CVSS metrics) |
| Attack Complexity | Low barrier (AC:L rating) |
| Affected Systems | ColorOS ≤15.0.2 devices using Clone Phone |
The vulnerability scored 7.4 under CVSSv3.1 due to its high confidentiality impact and changed scope (S:C), though it doesn’t affect integrity or availability.
Mitigation and Response
OPPO recommends:
- Immediate discontinuation of Clone Phone until patched
- Network monitoring for suspicious hotspot connections
- Upgrading ColorOS beyond version 15.0.2 when available
The company has published an advisory (NOTICE-1937080145974403072) and encourages further vulnerability submissions through their security program.
No exploits are currently reported, but proof-of-concept development remains possible given the low attack complexity.
Find this Story Interesting! Follow us on LinkedIn and X to Get More Instant updates
%20(1).webp?fit=1600,900&ssl=1&description=The vulnerability affects ColorOS 15.0.2 and earlier versions, enabling attackers within proximity to intercept sensitive files during device transfers.){kind=link}