Lucene search
PRIOn knowledge basePRION:CVE-2023-24508HistoryJan 26, 2023 - 9:18 p.m.
Command injection
2023-01-2621:18:00
PRIOn knowledge base
www.prio-n.com
2
baicells
lte tdd
command injection
remote shell code
exploitation
http
root permissions
nvd
Baicells Nova 227, Nova 233, and Nova 243 LTE TDD eNodeB devices with firmware through RTS/RTD 3.6.6 are vulnerable to remote shell code exploitation via HTTP command injections. Commands are executed using pre-login execution and executed with root permissions. The following methods below have been tested and validated by a 3rd party analyst and has been confirmed exploitable special thanks to Rustam Amin for providing the steps to reproduce.
| CPE | Name | Operator | Version |
|---|---|---|---|
| rtd_firmware | lt | 3.7.11.6 | |
| rts_firmware | lt | 3.7.11.6 |
Related
nvd
nvd
CVE-2023-24508
2023-01-26 21:18:19
cve
cve
CVE-2023-24508
2023-01-26 21:18:19
ics
ics
Baicells Nova
2023-02-02 12:00:00
cvelist
cvelist
CVE-2023-24508 Remote Code Execution in Baicells RTS Platform
2023-01-24 22:32:58