CVE-2022-24693

Baicells Nova436Q and Neutrino 430 devices with firmware through QRTB 2.7.8 have hardcoded credentials that are easily discovered, and can be used by remote attackers to authenticate via ssh. The credentials are stored in the firmware, encrypted by the crypt function...

The vulnerability of microprogramming software for base stations (BS) in wireless communication with Baicells Nova 436Q, Nova 430E, Nova 430I, and Neutrino 430 allows a intruder to execute arbitrary code.

The vulnerability of microprogramming software for base stations BS in wireless communication systems of Baicells Nova 436Q, Nova 430E, Nova 430I, and Neutrino 430 is related to the lack of protective measures for website structures. Exploiting this vulnerability allows a malicious actor to execu...

CVE-2023-0776

Baicells Nova 436Q, Nova 430E, Nova 430I, and Neutrino 430 LTE TDD eNodeB devices with firmware through QRTB 2.12.7 are vulnerable to remote shell code exploitation via HTTP command injections. Commands are executed using pre-login execution and executed with root permissions. The following metho...

CVE-2023-0776 Remote Code Execution in Baicells QRTB Platform

Baicells Nova 436Q, Nova 430E, Nova 430I, and Neutrino 430 LTE TDD eNodeB devices with firmware through QRTB 2.12.7 are vulnerable to remote shell code exploitation via HTTP command injections. Commands are executed using pre-login execution and executed with root permissions. The following metho...

CVE-2023-0776

Baicells Nova 436Q, Nova 430E, Nova 430I and Neutrino 430 LTE TDD eNodeB devices with firmware up to QRTB 2.12.7 are vulnerable to remote shell code execution via HTTP command injections. Affected firmware versions may execute commands with root privileges in pre-login context. Baicells indicates...

CVE-2022-24693

Baicells Nova436Q and Neutrino 430 devices with firmware through QRTB 2.7.8 have hardcoded credentials that are easily discovered, and can be used by remote attackers to authenticate via ssh. The credentials are stored in the firmware, encrypted by the crypt function...

CVE-2022-24693

Baicells Nova436Q and Neutrino 430 devices with firmware through QRTB 2.7.8 have hardcoded credentials that are easily discovered, and can be used by remote attackers to authenticate via ssh. The credentials are stored in the firmware, encrypted by the crypt function...

CVE-2022-24693

Baicells Nova436Q and Neutrino 430 devices with firmware through QRTB 2.7.8 have hardcoded credentials that are easily discovered, and can be used by remote attackers to authenticate via ssh. The credentials are stored in the firmware, encrypted by the crypt function...

Hardcoded credentials

Baicells Nova436Q and Neutrino 430 devices with firmware through QRTB 2.7.8 have hardcoded credentials that are easily discovered, and can be used by remote attackers to authenticate via ssh. The credentials are stored in the firmware, encrypted by the crypt function...

CVE-2022-24693

CVE-2022-24693 affects Baicells Nova436Q and Neutrino 430 devices with firmware through QRTB 2.7.8. The issue is hardcoded credentials stored in the firmware (encrypted by the crypt function) that can be discovered and used by remote attackers to authenticate via SSH. Multiple connected sources c...

CVE-2022-24693

Baicells Nova436Q and Neutrino 430 devices with firmware through QRTB 2.7.8 have hardcoded credentials that are easily discovered, and can be used by remote attackers to authenticate via ssh. The credentials are stored in the firmware, encrypted by the crypt function...

Baicells Nova436Q和Neutrino 430 信任管理问题漏洞

The Baicells Nova436Q and Baicells Neutrino 430 are both products of Baicells Incorporated, U.S.A. The Baicells Nova436Q is a state-of-the-art dual-carrier outdoor eNodeB eNB.The Baicells Neutrino 430 is a dual-carrier pico-microcell. A security vulnerability exists in the firmware of the Baicell...