HIGH🇵🇱 Wersja polska

CVE-2023-0776

CVSS 8.1v3.1pub. 2023-02-11upd. 2024-11-21

Baicells Nova 436Q, Nova 430E, Nova 430I, and Neutrino 430 LTE TDD eNodeB devices with firmware through QRTB 2.12.7 are vulnerable to remote shell code exploitation via HTTP command injections. Commands are executed using pre-login execution and executed with root permissions. The following methods below have been tested and validated by a 3rd party analyst and has been confirmed exploitable special thanks to Rustam Amin for providing the steps to reproduce. 

CVSS Vector
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:L/I:H/A:L

  • Baicells Neutrino 430

    HW
    Baicells
    wszystkie wersje

  • Baicells Neutrino 430 Firmware

    OS
    Baicells
    ≤ qrtb_2.12.7

  • Baicells Nova430e

    HW
    Baicells
    wszystkie wersje

  • Baicells Nova430e Firmware

    OS
    Baicells
    ≤ qrtb_2.12.7

  • Baicells Nova430l

    HW
    Baicells
    wszystkie wersje

  • Baicells Nova430l Firmware

    OS
    Baicells
    ≤ qrtb_2.12.7

  • Baicells Nova436q

    HW
    Baicells
    wszystkie wersje

  • Baicells Nova436q Firmware

    OS
    Baicells
    ≤ qrtb_2.12.7
🔵
CHECK WITH VENDOR
No clear patch data available. Check vendor references.
Tags
XSS
CWE
References

Related vulnerabilities

CVE-2022-24693CRITICAL9.8ten sam produkt

Baicells Nova436Q and Neutrino 430 devices with firmware through QRTB 2.7.8 have hardcoded credentials that ar...

CVE-2023-1097CRITICAL9.3ten sam vendor

Baicells EG7035-M11 devices with firmware through BCE-ODU-1.0.8 are vulnerable to improper code exploitation ...

CVE-2023-24022CRITICAL10.0ten sam vendor

Baicells Nova 227, Nova 233, and Nova 243 LTE TDD eNodeB devices with firmware through RTS/RTD 3.7.11.3 have h...

CVE-2023-24508HIGH8.1ten sam vendor

Baicells Nova 227, Nova 233, and Nova 243 LTE TDD eNodeB and Nova 246 devices with firmware through RTS/RTD 3....