CVE-2018-6312

CVSS V2 High 9 CVSS V3 High 7.2
Description
A privileged account with a weak default password on the Foxconn femtocell FEMTO AP-FC4064-T version AP_GT_B38_5.8.3lb15-W47 LTE Build 15 can be used to turn on the TELNET service via the web interface, which allows root login without any password. This vulnerability will lead to full system compromise and disclosure of user communications. The foxconn account with an 8-character lowercase alphabetic password can be used.
Overview
  • CVE ID
  • CVE-2018-6312
  • Assigner
  • cve@mitre.org
  • Vulnerability Status
  • Analyzed
  • Published Version
  • 2018-03-10T22:29:00
  • Last Modified Date
  • 2021-09-09T13:35:06
Weakness Enumerations
CWE URL
CWE-521 http://cwe.mitre.org/data/definitions/521.html
CPE Configuration (Product)
CPE Vulnerable Operator Version Start Version End
AND
cpe:2.3:o:foxconn:ap-fc4064-t_firmware:ap_gt_b38_5.8.3lb15-w47_lte:*:*:*:*:*:*:* 1 OR
cpe:2.3:h:foxconn:ap-fc4064-t:-:*:*:*:*:*:*:* 0 OR
CVSS Version 2
  • Version
  • 2.0
  • Vector String
  • AV:N/AC:L/Au:S/C:C/I:C/A:C
  • Access Vector
  • NETWORK
  • Access Compatibility
  • LOW
  • Authentication
  • SINGLE
  • Confidentiality Impact
  • COMPLETE
  • Integrity Impact
  • COMPLETE
  • Availability Impact
  • COMPLETE
  • Base Score
  • 9
  • Severity
  • HIGH
  • Exploitability Score
  • 8
  • Impact Score
  • 10
CVSS Version 3
  • Version
  • 3.1
  • Vector String
  • CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
  • Attack Vector
  • NETWORK
  • Attack Compatibility
  • LOW
  • Privileges Required
  • HIGH
  • User Interaction
  • NONE
  • Scope
  • UNCHANGED
  • Confidentiality Impact
  • HIGH
  • Availability Impact
  • HIGH
  • Base Score
  • 7.2
  • Base Severity
  • HIGH
  • Exploitability Score
  • 1.2
  • Impact Score
  • 5.9
References
Reference URL Reference Tags
https://gist.github.com/DrmnSamoLiu/cd1d6fa59501f161616686296aa4a6c8 Third Party Advisory
Sources
Source Name Source URL
NIST https://nvd.nist.gov/vuln/detail/CVE-2018-6312
MITRE https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-6312
History
Created Old Value New Value Data Type Notes
2022-05-10 16:06:30 Added to TrackCVE
2022-12-03 03:15:31 2018-03-10T22:29Z 2018-03-10T22:29:00 CVE Published Date updated
2022-12-03 03:15:31 2021-09-09T13:35:06 CVE Modified Date updated
2022-12-03 03:15:31 Analyzed Vulnerability Status updated