CVE-2018-6597 Privilege escalation in n/a
Attackers with physical access can exploit a hidden root shell mechanism via ADB to execute arbitrary commands as root on Alcatel A30 devices.
- Exploited in the wild
- Not known
- Login needed
- Not needed
- Attackable
- Local or same network only
- Victim action needed
- Not needed
- Fix
- None listed
What is CVE-2018-6597?
CVE-2018-6597 is a medium-severity vulnerability in n/a, published on 29 Aug 2018. It can only be exploited from the same machine or local network, with no action from the victim.
Official description
The Alcatel A30 device with a build fingerprint of TCL/5046G/MICKEY6US:7.0/NRD90M/J63:user/release-keys contains a hidden privilege escalation capability to achieve command execution as the root user. They have made modifications that allow a user with physical access to the device to obtain a root shell via ADB. Modifying the read-only properties by an app as the system user creates a UNIX domain socket named factory_test that will execute commands as the root user by processes that have privilege to access it (as per the SELinux rules that the vendor controls).
Which versions are affected by CVE-2018-6597?
It affects 1 product.
Products include Alcatel A30 Firmware.
How do I fix CVE-2018-6597?
No fix has been published for CVE-2018-6597 yet. Limit exposure of the affected software until one is available.
Is CVE-2018-6597 being exploited?
There is no known exploitation of CVE-2018-6597 in the wild and no public exploit code.
Sources
Also known as GHSA-g38m-568m-fp7q.