CVE-2018-6597: High severity alcatel a30 vulnerability
The Alcatel A30 device with a build fingerprint of TCL/5046G/MICKEY6US:7.0/NRD90M/J63:user/release-keys contains a hidden privilege escalation capability to achieve command execution as the root user. They have made modifications that allow a user with physical access to the device to obtain a root shell via ADB. Modifying the read-only properties by an app as the system user creates a UNIX domain socket named factorytest that will execute commands as the root user by processes that have privilege to access it (as per the SELinux rules that the vendor controls).
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2018-6597?
CVE-2018-6597 has a high severity due to the potential for local privilege escalation leading to root access.
How do I fix CVE-2018-6597?
To mitigate CVE-2018-6597, it is recommended to update the Alcatel A30 to the latest firmware version that addresses this vulnerability.
Who is affected by CVE-2018-6597?
CVE-2018-6597 affects users of the Alcatel A30 device running firmware version 7.0.
What are the consequences of CVE-2018-6597?
Exploitation of CVE-2018-6597 allows an attacker with physical access to obtain root command execution on the device.
Is the Alcatel A30 the only device affected by CVE-2018-6597?
Yes, CVE-2018-6597 specifically targets the Alcatel A30 with the specified firmware version.