PT-2018-17659 · Tcl · Alcatel A30

Published 2018-08-29 · Updated 2019-10-03 · CVE-2018-6597

Positive Technologies (AI Summary)

CVSS v2.0

7.2

High

Base vector

AV:L/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Alcatel A30 device with a build fingerprint of TCL/5046G/MICKEY6US:7.0/NRD90M/J63:user/release-keys

Description The issue concerns a hidden privilege escalation capability that allows command execution as the root user. This can be achieved by a user with physical access to the device via ADB. An app running as the system user can modify read-only properties, creating a UNIX domain socket named factory test. This socket executes commands as the root user, accessible by processes with the required privilege, as defined by the vendor-controlled SELinux rules.

Recommendations For the Alcatel A30 device with the specified build fingerprint, consider restricting access to the factory test UNIX domain socket to minimize the risk of exploitation. As a temporary workaround, disabling the capability to modify read-only properties by apps running as the system user may help mitigate the issue until a more permanent solution is available. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Related Identifiers

CVE-2018-6597

Affected Products

Alcatel A30

References · 3

• https://nvd.nist.gov/vuln/detail/CVE-2018-6597 · Security Note
• https://osv.dev/vulnerability/CVE-2018-6597 · Vendor Advisory
• https://kryptowire.com/portal/android-firmware-defcon-2018 · Note