Approved changes feed: RSS · Atom
cpe:2.3:h:alcatel:a30:-:*:*:*:*:*:*:*
part: h version: - update: *
| Vendor | Alcatel (faa45680-373a-5a95-8d19-8b0f2ddee566) |
|---|---|
| Product | A30 (f9e06643-892a-5699-ba4c-039b2fbd9ee2) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from gcve-enriched-dumps CVE data |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2018-6597 |
not_vulnerable | 2026-06-08 05:11:54.030198 |
Details available
The Alcatel A30 device with a build fingerprint of TCL/5046G/MICKEY6US:7.0/NRD90M/J63:user/release-keys contains a hidden privilege escalation capability to achieve command execution as the root user. They have made modifications that allow a user with physical access to the device to obtain a root shell via ADB. Modifying the read-only properties by an app as the system user creates a UNIX domain socket named factory_test that will execute commands as the root user by processes that have privilege to access it (as per the SELinux rules that the vendor controls).
Published: 2018-08-29T19:00:00.000Z
Updated: 2024-08-05T06:10:10.415Z Reference links |
Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.