Foxconn FEMTO AP-FC4064-T Code Execution Vulnerability

The Foxconn FEMTO AP-FC4064-T is a home base station device from Foxconn. A code execution hole exists in the Web administration page in the Foxconn FEMTO AP-FC4064-T APGTB385.8.3lb15-W47 LTE Build 15 release. A remote attacker can exploit this vulnerability to execute arbitrary code in a user's...

Default credentials

A low privileged admin account with a weak default password of admin exists on the Foxconn FEMTO AP-FC4064-T APGTB385.8.3lb15-W47 LTE Build 15. In addition, its web management page relies on the existence or values of cookies when performing security-critical operations. One can gain privileges b...

CVE-2018-9111

Cross Site Scripting XSS exists on the Foxconn FEMTO AP-FC4064-T APGTB385.8.3lb15-W47 LTE Build 15 via the configuration of a user account. An attacker can execute arbitrary script on an unsuspecting user's browser...

CVE-2018-9112: Use of Hard-coded Credentials

A low privileged admin account with a weak default password of admin exists on the Foxconn FEMTO AP-FC4064-T APGTB385.8.3lb15-W47 LTE Build 15. In addition, its web management page relies on the existence or values of cookies when performing security-critical operations. One can gain privileges b...

CVE-2018-9111: Improper Neutralization of Input During Web Page Generation

Cross Site Scripting XSS exists on the Foxconn FEMTO AP-FC4064-T APGTB385.8.3lb15-W47 LTE Build 15 via the configuration of a user account. An attacker can execute arbitrary script on an unsuspecting user's browser...

PT-2018-18860

Name of the Vulnerable Software and Affected Versions Foxconn FEMTO AP-FC4064-T AP GT B38 5.8.3lb15-W47 LTE Build 15 Description A Cross Site Scripting XSS issue exists, allowing an attacker to execute arbitrary script on an unsuspecting user's browser via the configuration of a user account...

PT-2018-18861

Name of the Vulnerable Software and Affected Versions Foxconn FEMTO AP-FC4064-T AP GT B38 5.8.3lb15-W47 LTE Build 15 Description The issue concerns a low-privileged admin account with a weak default password. Additionally, the web management page relies on cookies for security-critical operations...