CVE-2018-6312 - CVE House
Back to Database
Status published High CVE-2018-6312

A privileged account with a weak default password on the...

Vulnerability Description

A privileged account with a weak default password on the Foxconn femtocell FEMTO AP-FC4064-T version AP_GT_B38_5.8.3lb15-W47 LTE Build 15 can be used to turn on the TELNET service via the web interface, which allows root login without any password. This vulnerability will lead to full system compromise and disclosure of user communications. The foxconn account with an 8-character lowercase alphabetic password can be used.

Impact Analysis

Refer to official advisory for detailed impact metrics.

Remediation

Ensure systems are updated to the latest vendor-supplied patch levels.

THREAT MONITOR

Am I Vulnerable?

Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2018-6312

Credits & Attribution

No credits recorded in the NVD database.

References

More from foxconn

View All →
CVE-2020-24088
An issue was discovered in MmMapIoSpace routine in Foxconn Live...
High 7.8
CVE-2018-9112
A low privileged admin account with a weak default password...
Critical 9.8
CVE-2018-9111
Cross Site Scripting (XSS) exists on the Foxconn FEMTO AP-FC4064-T...
Medium 5.4
CVE-2018-6311
One can gain root access on the Foxconn femtocell FEMTO...
Medium 6.8

Affected Vendor

Affected Software

ap-fc4064-t firmware
Vulnerable Versions:
ap_gt_b38_5.8.3lb15-w47_lte

Timeline

Official Publish: March 10th, 2018
Last Modified: August 5th, 2024
Added to House: July 20th, 2026

CVSS Vectors

V3: CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H

Weaknesses (CWE)

No CWE data available

MITRE ATT&CK TTPs

No associated TTPs found for this vulnerability.