Skip to content
OpenAdvisories
Critical ICSA-23-033-03 1 CVE

Baicells Nova

Published Feb 2, 2023 · Updated Feb 2, 2023

Vendor: Baicells Product: Nova 227 Product: Nova 233 Product: Nova 243 Product: Nova 246

Summary

Successful exploitation of this vulnerability could allow an attacker to execute arbitrary commands.

Vulnerabilities 1

  • High 8.1
    CVE-2023-24508

    Remote Code Execution in Baicells RTS Platform

    Baicells Nova 227, Nova 233, and Nova 243 LTE TDD eNodeB and Nova 246 devices with firmware through RTS/RTD 3.6.6 are vulnerable to remote shell code exploitation via HTTP command injections. Commands are executed using pre-login execution and executed with r…

    Baicells Nova 233 Nova 227 Nova 246

Revision history

  1. #1

    Initial Publication

References