CVE-2023-24508
High
Description
Baicells Nova 227, Nova 233, and Nova 243 LTE TDD eNodeB and Nova 246 devices with firmware through RTS/RTD 3.6.6 are vulnerable to remote shell code exploitation via HTTP command injections. Commands are executed using pre-login execution and executed with root permissions. The following methods below have been tested and validated by a 3rd party analyst and has been confirmed exploitable special thanks to Rustam Amin for providing the steps to reproduce.
SeverityHigh
CVSS8.1
Exploit probability—
ProductBaicells Rtd Firmware
PublishedJan 26, 2023
First seenJan 26, 2023
Weakness typeCWE-79Cross-site scripting (XSS)
How to fix
Update
- baicells rtd_firmware3.7.11.6 or later
- baicells rts_firmware3.7.11.6 or later
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| baicells rtd_firmware | v < 3.7.11.6 | 3.7.11.6 |
| baicells rts_firmware | v < 3.7.11.6 | 3.7.11.6 |
Check your version
Choose the product and enter the version you run to see whether it falls in the affected range.
In the Intelligence 360 plan
Attack Surface Management
See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.