PT-2018-17467 · Foxconn · Femto Ap-Fc4064-T

Drmnsamoliu · Published 2018-03-10 · Updated 2021-09-09 · CVE-2018-6311

Positive Technologies (AI Summary)

CVSS v2.0

7.2

High

Base vector

AV:L/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Foxconn femtocell FEMTO AP-FC4064-T version AP GT B38 5.8.3lb15-W47 LTE Build 15

Description The issue allows an attacker to gain root access to the system via UART pins without any restrictions, leading to full system compromise and potential disclosure of user communications.

Recommendations For Foxconn femtocell FEMTO AP-FC4064-T version AP GT B38 5.8.3lb15-W47 LTE Build 15, consider restricting physical access to the UART pins as a temporary mitigation measure until a patch is available. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Related Identifiers

CVE-2018-6311

Affected Products

Femto Ap-Fc4064-T

References · 3

• https://osv.dev/vulnerability/CVE-2018-6311 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2018-6311 · Security Note
• https://gist.github.com/DrmnSamoLiu/cd1d6fa59501f161616686296aa4a6c8 · Note