{"id":"CVE-2018-9112","aliases":["EUVD-2018-20712","GHSA-4r4r-hj2w-xx29"],"status":"published","title":"A low privileged admin account with a weak default password of admin exists on the Foxconn FEMTO...","description":"A low privileged admin account with a weak default password of admin exists on the Foxconn FEMTO AP-FC4064-T AP_GT_B38_5.8.3lb15-W47 LTE Build 15. In addition, its web management page relies on the existence or values of cookies when performing security-critical operations. One can gain privileges by modifying cookies.","severity":{"version":"3.0","score":9.8,"vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"critical","assessor":"primary","from":"nvd"},"epss":{"day":"2026-11-07","score":0.0129,"percentile":0.70399,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":false},"cwes":["CWE-798"],"published":"2018-05-10T03:00:00Z","modified":"2026-06-17T02:06:05Z","products":[{"vendor":"foxconn","product":"ap-fc4064-t_firmware"}],"references":[{"url":"https://gist.github.com/ChuanYuan-Huang/a92b8b32980123d5fa9bf5a8299114bf","tags":["x_refsource_MISC","x_transferred","Exploit","Third Party Advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2018-9112"},{"url":"https://github.com/advisories/GHSA-4r4r-hj2w-xx29"}],"sources":{"cve":[{"id":"CVE-2018-9112","description":"A low privileged admin account with a weak default password of admin exists on the Foxconn FEMTO AP-FC4064-T AP_GT_B38_5.8.3lb15-W47 LTE Build 15. In addition, its web management page relies on the existence or values of cookies when performing security-critical operations. One can gain privileges by modifying cookies.","status":"published","published":"2018-05-10T03:00:00Z","modified":"2024-08-05T07:17:50.726Z","updated_at":"2026-11-02T14:35:02.603326Z"}],"euvd":[{"id":"EUVD-2018-20712","description":"A low privileged admin account with a weak default password of admin exists on the Foxconn FEMTO AP-FC4064-T AP_GT_B38_5.8.3lb15-W47 LTE Build 15. In addition, its web management page relies on the existence or values of cookies when performing security-critical operations. One can gain privileges by modifying cookies.","status":"published","published":"2018-05-10T03:00:00Z","modified":"2024-08-05T07:17:50Z","updated_at":"2026-11-03T02:40:00.889185Z"}],"ghsa":[{"id":"GHSA-4r4r-hj2w-xx29","title":"A low privileged admin account with a weak default password of admin exists on the Foxconn FEMTO...","description":"A low privileged admin account with a weak default password of admin exists on the Foxconn FEMTO AP-FC4064-T AP_GT_B38_5.8.3lb15-W47 LTE Build 15. In addition, its web management page relies on the existence or values of cookies when performing security-critical operations. One can gain privileges by modifying cookies.","status":"published","published":"2022-05-14T03:17:42Z","modified":"2023-02-02T05:07:18Z","cvss":[{"version":"3.0","score":9.8,"vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"critical"}],"cwes":["CWE-798"],"updated_at":"2026-11-02T14:52:28.437617Z"}],"nvd":[{"id":"CVE-2018-9112","description":"A low privileged admin account with a weak default password of admin exists on the Foxconn FEMTO AP-FC4064-T AP_GT_B38_5.8.3lb15-W47 LTE Build 15. In addition, its web management page relies on the existence or values of cookies when performing security-critical operations. One can gain privileges by modifying cookies.","status":"published","published":"2018-05-10T03:29:00.513Z","modified":"2026-06-17T02:06:05.66Z","cvss":[{"version":"3.0","score":9.8,"vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"critical","assessor":"primary"},{"version":"2.0","score":7.5,"vector":"AV:N/AC:L/Au:N/C:P/I:P/A:P","level":"high","assessor":"primary"}],"cwes":["CWE-798"],"updated_at":"2026-11-02T14:04:26.098615Z"}]}}