Nova436q Firmware vulnerabilities

2 known vulnerabilities in Nova436q Firmware from Baicells. 2 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 10.0 Critical severity

  Nova 436Q: Improper Neutralization of Special Elements used in a Command

  CVE-2023-0776Feb 11, 2023BaicellsEPSS 1.19%

  Baicells Nova 436Q, Nova 430E, Nova 430I, and Neutrino 430 LTE TDD eNodeB devices with firmware through QRTB 2.12.7 are vulnerable to remote shell code exploitation via HTTP command injections. Commands are executed using pre-login execution and executed with

• 9.8 Critical severity

  Nova436q Firmware: Use of Hard-coded Credentials

  CVE-2022-24693Mar 30, 2022BaicellsEPSS 3.34%

  Baicells Nova436Q and Neutrino 430 devices with firmware through QRTB 2.7.8 have hardcoded credentials that are easily discovered, and can be used by remote attackers to authenticate via ssh. (The credentials are stored in the firmware, encrypted by the crypt