Baicells Nova 436Q, Nova 430E, Nova 430I, and Neutrino 430 LTE TDD eNodeB devices with firmware through QRTB 2.12.7 are vulnerable to remote shell code exploitation via HTTP command injections. Commands are executed using pre-login execution and executed with root permissions. The following methods below have been tested and validated by a 3rd party analyst and has been confirmed exploitable special thanks to Rustam Amin for providing the steps to reproduce.
References
Link | Resource |
---|---|
https://baicells.com/Service/Firmware | Patch Vendor Advisory |
History
No history.
MITRE Information
Status: PUBLISHED
Assigner: Baicells
Published: 2023-02-10T21:50:42.853Z
Updated:
Reserved: 2023-02-10T18:08:54.398Z
Link: CVE-2023-0776
JSON object: View
NVD Information
Status : Modified
Published: 2023-02-11T01:23:26.113
Modified: 2023-11-07T04:01:26.697
Link: CVE-2023-0776
JSON object: View
Redhat Information
No data.