Логотип exploitDog
bind:CVE-2023-0776
Консоль
Логотип exploitDog

exploitDog

bind:CVE-2023-0776

Количество 3

Количество 3

nvd логотип

CVE-2023-0776

почти 3 года назад

Baicells Nova 436Q, Nova 430E, Nova 430I, and Neutrino 430 LTE TDD eNodeB devices with firmware through QRTB 2.12.7 are vulnerable to remote shell code exploitation via HTTP command injections. Commands are executed using pre-login execution and executed with root permissions. The following methods below have been tested and validated by a 3rd party analyst and has been confirmed exploitable special thanks to Rustam Amin for providing the steps to reproduce. 

CVSS3: 8.1
EPSS: Низкий
github логотип

GHSA-5r9j-84ww-47gm

почти 3 года назад

Baicells Nova 436Q, Nova 430E, Nova 430I, and Neutrino 430 LTE TDD eNodeB devices with firmware through QRTB 2.12.7 are vulnerable to remote shell code exploitation via HTTP command injections. Commands are executed using pre-login execution and executed with root permissions. The following methods below have been tested and validated by a 3rd party analyst and has been confirmed exploitable special thanks to Rustam Amin for providing the steps to reproduce.

CVSS3: 10
EPSS: Низкий
fstec логотип

BDU:2024-01166

почти 3 года назад

Уязвимость микропрограммного обеспечения базовыми станциями (BS) для беспроводной связи Baicells Nova 436Q, Nova 430E, Nova 430I и Neutrino 430, позволяющая нарушителю выполнить произвольный код

CVSS3: 9.8
EPSS: Низкий

Уязвимостей на страницу

Уязвимость
CVSS
EPSS
Опубликовано
nvd логотип
CVE-2023-0776

Baicells Nova 436Q, Nova 430E, Nova 430I, and Neutrino 430 LTE TDD eNodeB devices with firmware through QRTB 2.12.7 are vulnerable to remote shell code exploitation via HTTP command injections. Commands are executed using pre-login execution and executed with root permissions. The following methods below have been tested and validated by a 3rd party analyst and has been confirmed exploitable special thanks to Rustam Amin for providing the steps to reproduce. 

CVSS3: 8.1
0%
Низкий
почти 3 года назад
github логотип
GHSA-5r9j-84ww-47gm

Baicells Nova 436Q, Nova 430E, Nova 430I, and Neutrino 430 LTE TDD eNodeB devices with firmware through QRTB 2.12.7 are vulnerable to remote shell code exploitation via HTTP command injections. Commands are executed using pre-login execution and executed with root permissions. The following methods below have been tested and validated by a 3rd party analyst and has been confirmed exploitable special thanks to Rustam Amin for providing the steps to reproduce.

CVSS3: 10
0%
Низкий
почти 3 года назад
fstec логотип
BDU:2024-01166

Уязвимость микропрограммного обеспечения базовыми станциями (BS) для беспроводной связи Baicells Nova 436Q, Nova 430E, Nova 430I и Neutrino 430, позволяющая нарушителю выполнить произвольный код

CVSS3: 9.8
0%
Низкий
почти 3 года назад

Уязвимостей на страницу