9.6

CVE-2023-24508

Baicells Nova 227, Nova 233, and Nova 243 LTE TDD eNodeB and Nova 246 devices with firmware through RTS/RTD 3.6.6 are vulnerable to remote shell code exploitation via HTTP command injections. Commands are executed using pre-login execution and executed with root permissions. The following methods below have been tested and validated by a 3rd party analyst and has been confirmed exploitable special thanks to Rustam Amin for providing the steps to reproduce. 
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Baicells ≫ Rtd Firmware Version < 3.7.11.6
   Baicells ≫ Nova227 Version-
   Baicells ≫ Nova233 Version-
   Baicells ≫ Nova243 Version-
   Baicells ≫ Nova246 Version-
Baicells ≫ Rts Firmware Version < 3.7.11.6
   Baicells ≫ Nova227 Version-
   Baicells ≫ Nova233 Version-
   Baicells ≫ Nova243 Version-
   Baicells ≫ Nova246 Version-
Zu dieser CVE wurde keine CISA KEV oder CERT.AT-Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 0.24% 0.471
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
nvd@nist.gov 9.6 2.8 6
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H
security@baicells.com 8.1 2.2 5.3
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:L/I:H/A:L
CWE-79 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')

The product does not neutralize or incorrectly neutralizes user-controllable input before it is placed in output that is used as a web page that is served to other users.