Critical severity · published Mar 30, 2022
CVE-2022-24693
Baicells Nova436Q and Neutrino 430 devices with firmware through QRTB 2.7.8 have hardcoded credentials that are easily discovered, and can be used by remote attackers to…
9.8
CVSS
3.3%
EPSS
No
On KEV
Description
Baicells Nova436Q and Neutrino 430 devices with firmware through QRTB 2.7.8 have hardcoded credentials that are easily discovered, and can be used by remote attackers to authenticate via ssh. (The credentials are stored in the firmware, encrypted by the crypt function.)
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Attack vector
Network
Complexity
Low
Privileges
None
User interaction
None
Confidentiality
High
Integrity
High
Availability
High
Scope
Unchanged
Exploitation
Is it being used?
Exploit prediction (EPSS)3.3% · higher than 89% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
N4
Neutrino 430 Firmware · Baicells
through qrtb_2.7.8 · source: NVD
NF
Nova436q Firmware · Baicells
through qrtb_2.7.8 · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2022-24693
CVE.org
https://www.cve.org/CVERecord?id=CVE-2022-24693
Third Party Advisory
https://github.com/lukejenkins/CVE-2022-24693
Release Notes
https://img.baicells.com/Upload/20210909/FILE/98d2752f-6e83-49b1-9dab-d291e9023db6.pdf
Vendor Advisory
https://na.baicells.com/Service/Firmware
More from Neutrino 430 Firmware
10.0
CVE-2023-0776
Baicells Nova 436Q, Nova 430E, Nova 430I, and Neutrino 430 LTE TDD eNodeB devices with firmware through QRTB 2.12.7 are vulnerable to remote shell code exploitation via HTTP…