Strix
26.1K

CVE-2018-6597

UnknownEPSS 0.50%

Last modified

CVE-2018-6597 is a vulnerability of currently unknown severity. The Alcatel A30 device with a build fingerprint of TCL/5046G/MICKEY6US:7.0/NRD90M/J63:user/release-keys contains a hidden privilege escalation capability to achieve command execution as the root user. They have made modifications that allow a user with physical access to the device to obtain a root shell via ADB. EPSS estimates a 0.50% chance of exploitation in the next 30 days.

Description

The Alcatel A30 device with a build fingerprint of TCL/5046G/MICKEY6US:7.0/NRD90M/J63:user/release-keys contains a hidden privilege escalation capability to achieve command execution as the root user. They have made modifications that allow a user with physical access to the device to obtain a root shell via ADB. Modifying the read-only properties by an app as the system user creates a UNIX domain socket named factory_test that will execute commands as the root user by processes that have privilege to access it (as per the SELinux rules that the vendor controls).

Metrics

EPSS Probability
0.50%

38.9th percentile

Probability of exploitation in the next 30 days. Learn more

Affected Software

VendorProductVersions
AlcatelA30 Firmware7.0

References

Timeline

Published
Last Modified
Status
Modified

Frequently Asked Questions

What is CVE-2018-6597?
The Alcatel A30 device with a build fingerprint of TCL/5046G/MICKEY6US:7.0/NRD90M/J63:user/release-keys contains a hidden privilege escalation capability to achieve command execution as the root user. They have made modifications that allow a user with physical access to the device to obtain a root shell via ADB. Modifying the read-only properties by an app as the system user creates a UNIX domain socket named factory_test that will execute commands as the root user by processes that have privilege to access it (as per the SELinux rules that the vendor controls).
How severe is CVE-2018-6597?
Severity scoring for CVE-2018-6597 is pending analysis. The EPSS model estimates a 0.50% probability of exploitation in the next 30 days.
How do I fix CVE-2018-6597?
Check the vendor references and advisories linked above for patched versions and mitigation guidance. You can also run a Strix scan to test if your systems are affected.

Are you affected by CVE-2018-6597?

Run a free Strix scan to check your systems for this vulnerability.

Scan your code now

Source: NVD / NIST