CVE-2023-0776

🗓️ 10 Feb 2023 21:50:42Reported by BaicellsType

Baicells Nova 436Q, Nova 430E, and Neutrino 430 LTE TDD eNodeB devices vulnerable to remote shell code exploitation via HTTP command injections

Reporter	Title	Published	Views	Family All 8
CNNVD	Baicells Nova 命令注入漏洞	11 Feb 202300:00	–	cnnvd
Cvelist	CVE-2023-0776 Remote Code Execution in Baicells QRTB Platform	10 Feb 202321:50	–	cvelist
EUVD	EUVD-2023-12793	3 Oct 202520:07	–	euvd
ICS	Baicells Nova	2 Mar 202307:00	–	ics
NVD	CVE-2023-0776	11 Feb 202301:23	–	nvd
OSV	CVE-2023-0776	11 Feb 202301:23	–	osv
Prion	Command injection	11 Feb 202301:23	–	prion
Vulnrichment	CVE-2023-0776 Remote Code Execution in Baicells QRTB Platform	10 Feb 202321:50	–	vulnrichment

NVD

Node

baicells neutrino_430_firmwareRange≤qrtb_2.12.7

AND

baicells neutrino_430Match-

Node

baicells nova430l_firmwareRange≤qrtb_2.12.7

AND

baicells nova430lMatch-

Node

baicells nova430e_firmwareRange≤qrtb_2.12.7

AND

baicells nova430eMatch-

Node

baicells nova436q_firmwareRange≤qrtb_2.12.7

AND

baicells nova436qMatch-

[
  {
    "defaultStatus": "unaffected",
    "modules": [
      "2.12.x"
    ],
    "platforms": [
      "QRTB"
    ],
    "product": "Nova 436Q",
    "vendor": "Baicells",
    "versions": [
      {
        "changes": [
          {
            "at": "2.12.8",
            "status": "unaffected"
          }
        ],
        "lessThanOrEqual": "2.12.7",
        "status": "affected",
        "version": "0",
        "versionType": "patch"
      }
    ]
  },
  {
    "defaultStatus": "unaffected",
    "modules": [
      "2.12.x"
    ],
    "platforms": [
      "QRTB"
    ],
    "product": "Nova 430E",
    "vendor": "Baicells",
    "versions": [
      {
        "changes": [
          {
            "at": "2.12.8",
            "status": "unaffected"
          }
        ],
        "lessThanOrEqual": "2.12.7",
        "status": "affected",
        "version": "0",
        "versionType": "patch"
      }
    ]
  },
  {
    "defaultStatus": "unaffected",
    "modules": [
      "2.12.x"
    ],
    "platforms": [
      "QRTB"
    ],
    "product": "Nova 430I",
    "vendor": "Baicells",
    "versions": [
      {
        "changes": [
          {
            "at": "2.12.8",
            "status": "unaffected"
          }
        ],
        "lessThanOrEqual": "2.12.7",
        "status": "affected",
        "version": "0",
        "versionType": "patch"
      }
    ]
  },
  {
    "defaultStatus": "unaffected",
    "modules": [
      "2.12.x",
      "0"
    ],
    "platforms": [
      "QRTB"
    ],
    "product": "Neutrino 430",
    "vendor": "Baicells",
    "versions": [
      {
        "changes": [
          {
            "at": "2.12.8",
            "status": "unaffected"
          }
        ],
        "lessThanOrEqual": "2.12.7",
        "status": "affected",
        "version": "0",
        "versionType": "patch"
      }
    ]
  }
]

Source	Link
baicells	www.baicells.com/Service/Firmware

21 Nov 2024 07:37Current

9.3High risk

Vulners AI Score9.3

CVSS 3.18.1 - 10

EPSS0.00467

SSVC