CVE-2023-24022

  1. OpenCVE
  2. Vulnerabilities (CVE)
  3. CVE-2023-24022
Baicells Nova 227, Nova 233, and Nova 243 LTE TDD eNodeB devices with firmware through RTS/RTD 3.7.11.3 have hardcoded credentials that are easily discovered and can be used by remote attackers to authenticate via ssh. (The credentials are stored in the firmware, encrypted by the crypt function.)

10.0 /10

CVSS v3 : CRITICAL

V3 Legend

Vector :

Exploitability : 3.9 / Impact : 6.0

Attack Vector NETWORK

Attack Complexity LOW

Privileges Required NONE

User Interaction NONE

Confidentiality Impact HIGH

Integrity Impact HIGH

Availability Impact LOW

Scope CHANGED

References
Link Resource
https://baicells.zendesk.com/hc/en-us/articles/6188324645780-2023-1-17-Hard-Coded-Credential-Crypt-Vulnerability Patch Vendor Advisory
https://img.baicells.com//Upload/20230118/FILE/BaiBS_RTS_3.7.11.6.IMG.IMG Release Notes Vendor Advisory
https://img.baicells.com//Upload/20230118/FILE/BaiBS_RTS_3.7.11.6_Changelog.PDF.pdf Release Notes Vendor Advisory
https://baicells.zendesk.com/hc/en-us/articles/6188324645780-2023-1-17-Hard-Coded-Credential-Crypt-Vulnerability Patch Vendor Advisory
https://img.baicells.com//Upload/20230118/FILE/BaiBS_RTS_3.7.11.6.IMG.IMG Release Notes Vendor Advisory
https://img.baicells.com//Upload/20230118/FILE/BaiBS_RTS_3.7.11.6_Changelog.PDF.pdf Release Notes Vendor Advisory
Configurations

Configuration 1 (hide)

AND
OR cpe:2.3:o:baicells:rtd_firmware:*:*:*:*:*:*:*:*
cpe:2.3:o:baicells:rts_firmware:*:*:*:*:*:*:*:*
OR cpe:2.3:h:baicells:nova227:-:*:*:*:*:*:*:*
cpe:2.3:h:baicells:nova233:-:*:*:*:*:*:*:*
cpe:2.3:h:baicells:nova243:-:*:*:*:*:*:*:*
History

21 Nov 2024, 07:47

Type Values Removed Values Added
CVSS v2 : unknown
v3 : 9.8 		v2 : unknown
v3 : 10.0
References () https://baicells.zendesk.com/hc/en-us/articles/6188324645780-2023-1-17-Hard-Coded-Credential-Crypt-Vulnerability - Patch, Vendor Advisory () https://baicells.zendesk.com/hc/en-us/articles/6188324645780-2023-1-17-Hard-Coded-Credential-Crypt-Vulnerability - Patch, Vendor Advisory
References () https://img.baicells.com//Upload/20230118/FILE/BaiBS_RTS_3.7.11.6.IMG.IMG - Release Notes, Vendor Advisory () https://img.baicells.com//Upload/20230118/FILE/BaiBS_RTS_3.7.11.6.IMG.IMG - Release Notes, Vendor Advisory
References () https://img.baicells.com//Upload/20230118/FILE/BaiBS_RTS_3.7.11.6_Changelog.PDF.pdf - Release Notes, Vendor Advisory () https://img.baicells.com//Upload/20230118/FILE/BaiBS_RTS_3.7.11.6_Changelog.PDF.pdf - Release Notes, Vendor Advisory

07 Nov 2023, 04:08

Type Values Removed Values Added
Summary Baicells Nova 227, Nova 233, and Nova 243 LTE TDD eNodeB devices with firmware through RTS/RTD 3.7.11.3 have hardcoded credentials that are easily discovered and can be used by remote attackers to authenticate via ssh. (The credentials are stored in the firmware, encrypted by the crypt function.) Baicells Nova 227, Nova 233, and Nova 243 LTE TDD eNodeB devices with firmware through RTS/RTD 3.7.11.3 have hardcoded credentials that are easily discovered and can be used by remote attackers to authenticate via ssh. (The credentials are stored in the firmware, encrypted by the crypt function.)
Information

Published : 2023-01-26 21:18

Updated : 2024-11-21 07:47

NVD link : CVE-2023-24022

Mitre link : CVE-2023-24022

CVE.ORG link : CVE-2023-24022

JSON object : View

Products Affected

baicells

  • nova233
  • nova243
  • nova227
  • rtd_firmware
  • rts_firmware
CWE
CWE-284

Improper Access Control

CWE-798

Use of Hard-coded Credentials