Security readout for executives and security teams
Plain-English summary
CVE-2018-9111 is a reported cross-site scripting issue in a Foxconn FEMTO AP-FC4064-T LTE access point build. If triggered, it could run attacker-controlled script in another user's browser. The public record does not provide severity, CVSS, confirmed exploitation, or vendor remediation details.
Executive priority
Prioritize confirmation of exposure over emergency response. The issue could affect administrative browser sessions, but the public evidence lacks severity scoring, active exploitation, and remediation detail.
Technical view
The CVE describes XSS in Foxconn FEMTO AP-FC4064-T AP_GT_B38_5.8.3lb15-W47 LTE Build 15 via user account configuration. Impact is limited in the sources to arbitrary script execution in an unsuspecting user's browser. The record lacks CWE, CVSS, affected-version structure, and patch guidance.
Likely exposure
Exposure is likely limited to organizations operating the named Foxconn FEMTO AP-FC4064-T LTE build, especially where its management interface is reachable by users who manage accounts. The sources do not define broader affected products.
Exploitation context
The CVE source says an attacker can execute arbitrary script in a user's browser. There is no KEV listing in the bundle and no cited source confirming active exploitation or exploit maturity.
Researcher notes
Evidence is sparse. The affected product is named in the title and description, while structured affected fields are unavailable. Do not assume other Foxconn devices or firmware builds are affected without vendor or researcher confirmation.
Mitigation direction
- Identify whether the named Foxconn FEMTO AP-FC4064-T build is deployed.
- Restrict access to device management interfaces to trusted administrative networks.
- Check Foxconn or operator guidance for firmware updates or compensating controls.
- Review user-account configuration workflows for untrusted input exposure.
- Treat browser sessions to device administration pages as sensitive.
Validation and detection
- Inventory deployed femtocell or LTE access point firmware versions.
- Confirm whether AP_GT_B38_5.8.3lb15-W47 LTE Build 15 is present.
- Review device administration access paths and account-management permissions.
- Check vulnerability scanners or asset records for CVE-2018-9111 references.
- Document whether vendor remediation is available or absent.
Public sources used
Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.
Conservative CVE-to-ATT&CK context
These mappings and lookup hints may be relevant to the vulnerability behavior, CWE, affected product, or exposure path. Glexia-inferred context is not an official MITRE, ATT&CK, CWE, or CVE Program mapping.
ATT&CK lookup starting points
Use these exact CWE pages and searches to review the Glexia ATT&CK library from this CVE's weakness and description context.
CVE-2018-9111 mapping review
Open the CVE-to-ATT&CK bridge for reviewed, inferred, or future official mappings tied to this CVE.
Open ATT&CK lookup- Severity
- Unknown
- CVSS
- Not scored
- Known Exploited
- No
- Published
CNA and ADP enrichment extracted from CVE v5
These fields come from the CVE record and ADP containers, not from Glexia's Take. They preserve time-varying source decisions such as CISA SSVC, KEV status, CVSS metrics, and provider references.
CVSS and timeline data
No CVSS vectors or timeline events were available in the normalized CVE source material.
Source materials
- CVE List V5 sourceCVE List V5
- https://gist.github.com/ChuanYuan-Huang/a92b8b32980123d5fa9bf5a8299114bfCVE reference · x_refsource_MISC
Products and packages named in the record
CWE details
CWE links open Glexia weakness intelligence pages with official CWE context, developer remediation guidance, and related CVE mappings.