What’s Vulnerable › Vulnerabilities

CVE-2018-6597

• Severity: medium (CVSS 6.8 v3.0)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.5% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2018-08-29 · updated 2026-06-17

Description

The Alcatel A30 device with a build fingerprint of TCL/5046G/MICKEY6US:7.0/NRD90M/J63:user/release-keys contains a hidden privilege escalation capability to achieve command execution as the root user. They have made modifications that allow a user with physical access to the device to obtain a root shell via ADB. Modifying the read-only properties by an app as the system user creates a UNIX domain socket named factory_test that will execute commands as the root user by processes that have privilege to access it (as per the SELinux rules that the vendor controls).

Affected products

• Alcatel A30 Firmware: 7.0

References

• https://www.kryptowire.com/portal/android-firmware-defcon-2018/
• https://www.kryptowire.com/portal/android-firmware-defcon-2018/

Get alerted when CVE-2018-6597 or the next vulnerability affects your stack