CVE-2023-0776

🗓️ 10 Feb 2023 21:50:42Reported by BaicellsType

Baicells Nova 436Q, Nova 430E, and Neutrino 430 LTE TDD eNodeB devices vulnerable to remote shell code exploitation via HTTP command injections

Reporter	Title	Published	Views	Family All 11
BDU FSTEC	BS Code Execution	13 Feb 202400:00	–	bdu_fstec
CNNVD	Baicells Nova 命令注入漏洞	11 Feb 202300:00	–	cnnvd
Cvelist	CVE-2023-0776 Remote Code Execution in Baicells QRTB Platform	10 Feb 202321:50	–	cvelist
EUVD	EUVD-2023-12793	3 Oct 202520:07	–	euvd
ICS	Baicells Nova	2 Mar 202307:00	–	ics
NVD	CVE-2023-0776	11 Feb 202301:23	–	nvd
osv_cve	CVE-2023-0776	11 Feb 202301:23	–	osv_cve
Prion	Command injection	11 Feb 202301:23	–	prion
Positive Technologies	PT-2023-8559	10 Feb 202300:00	–	ptsecurity
Rapid7 Vulnerability Database (full)	CVE-2023-0776: Improper Neutralization of Input During Web Page Generation	10 Feb 202300:00	–	rapid7

NVD

Node

AND

baicells neutrino_430_firmwareRange≤qrtb_2.12.7

baicells neutrino_430Match-

Node

AND

baicells nova430l_firmwareRange≤qrtb_2.12.7

baicells nova430lMatch-

Node

AND

baicells nova430e_firmwareRange≤qrtb_2.12.7

baicells nova430eMatch-

Node

AND

baicells nova436q_firmwareRange≤qrtb_2.12.7

baicells nova436qMatch-

[
  {
    "defaultStatus": "unaffected",
    "modules": [
      "2.12.x"
    ],
    "platforms": [
      "QRTB"
    ],
    "product": "Nova 436Q",
    "vendor": "Baicells",
    "versions": [
      {
        "changes": [
          {
            "at": "2.12.8",
            "status": "unaffected"
          }
        ],
        "lessThanOrEqual": "2.12.7",
        "status": "affected",
        "version": "0",
        "versionType": "patch"
      }
    ]
  },
  {
    "defaultStatus": "unaffected",
    "modules": [
      "2.12.x"
    ],
    "platforms": [
      "QRTB"
    ],
    "product": "Nova 430E",
    "vendor": "Baicells",
    "versions": [
      {
        "changes": [
          {
            "at": "2.12.8",
            "status": "unaffected"
          }
        ],
        "lessThanOrEqual": "2.12.7",
        "status": "affected",
        "version": "0",
        "versionType": "patch"
      }
    ]
  },
  {
    "defaultStatus": "unaffected",
    "modules": [
      "2.12.x"
    ],
    "platforms": [
      "QRTB"
    ],
    "product": "Nova 430I",
    "vendor": "Baicells",
    "versions": [
      {
        "changes": [
          {
            "at": "2.12.8",
            "status": "unaffected"
          }
        ],
        "lessThanOrEqual": "2.12.7",
        "status": "affected",
        "version": "0",
        "versionType": "patch"
      }
    ]
  },
  {
    "defaultStatus": "unaffected",
    "modules": [
      "2.12.x",
      "0"
    ],
    "platforms": [
      "QRTB"
    ],
    "product": "Neutrino 430",
    "vendor": "Baicells",
    "versions": [
      {
        "changes": [
          {
            "at": "2.12.8",
            "status": "unaffected"
          }
        ],
        "lessThanOrEqual": "2.12.7",
        "status": "affected",
        "version": "0",
        "versionType": "patch"
      }
    ]
  }
]

Source	Link
baicells	www.baicells.com/Service/Firmware

17 Jun 2026 05:26Current

9.3Critical risk

Vulners AI Score9.3

CVSS 3.18.1 - 10

EPSS0.01193

SSVC