Drmnsamoliu

**Name of the Vulnerable Software and Affected Versions** Synology Camera Firmware versions prior to 1.0.7-0298 **Description** A vulnerability related to improper neutralization of special elements used in an OS command is found in the IP block functionality, allowing remote authenticated users with administrator privileges to execute arbitrary commands via unspecified vectors. **Recommendations** For versions prior to 1.0.7-0298, update to version 1.0.7-0298 or later to resolve the issue.

**Name of the Vulnerable Software and Affected Versions** Foxconn femtocell FEMTO AP-FC4064-T version AP GT B38 5.8.3lb15-W47 LTE Build 15 **Description** The issue allows an attacker to gain root access to the system via UART pins without any restrictions, leading to full system compromise and potential disclosure of user communications. **Recommendations** For Foxconn femtocell FEMTO AP-FC4064-T version AP GT B38 5.8.3lb15-W47 LTE Build 15, consider restricting physical access to the UART pins as a temporary mitigation measure until a patch is available. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** Foxconn femtocell FEMTO AP-FC4064-T version AP GT B38 5.8.3lb15-W47 LTE Build 15 **Description** A default weak password in a privileged account can be exploited to enable the TELNET service through the web interface, allowing root login without a password. This can lead to full system compromise and the disclosure of user communications. The `foxconn` account has an 8-character lowercase alphabetic default password. **Recommendations** For Foxconn femtocell FEMTO AP-FC4064-T version AP GT B38 5.8.3lb15-W47 LTE Build 15, change the default password of the `foxconn` account to a strong password to prevent unauthorized access. As a temporary workaround, consider disabling the TELNET service via the web interface until a secure configuration or patch is available. Restrict access to the web interface to minimize the risk of exploitation.