<?xml version="1.0" encoding="UTF-8"?>
<?xml-stylesheet type="text/xsl" href="rss.xsl"?>
<rss version="2.0" xmlns:atom="http://www.w3.org/2005/Atom">
  <channel>
    <title>baicells — recent CVEs</title>
    <link>https://vulnogram.org/</link>
    <atom:link href="https://vulnogram.org/rss/baicells" rel="self" type="application/rss+xml"/>
    <description>Most recent CVEs assigned by baicells (baicells).</description>
    <image>
      <url>https://vulnogram.org/seaview/icons/baicells.png</url>
      <title>baicells — recent CVEs</title>
      <link>https://vulnogram.org/</link>
    </image>
    <lastBuildDate>Wed, 21 Oct 2026 07:00:07 GMT</lastBuildDate>
    <item>
      <title>CVE-2023-6198 · 9.3 CRITICAL 🌩️ — Hard Coded Credential</title>
      <link>https://vulnogram.org/CVE-2023-6198</link>
      <guid isPermaLink="true">https://vulnogram.org/CVE-2023-6198</guid>
      <description>Use of Hard-coded Credentials vulnerability in Baicells Snap Router BaiCE_BMI on EP3011 (User Passwords modules) allows unauthorized access to the device.</description>
      <category>Critical</category>
      <category>Network Exploitable</category>
      <pubDate>Tue, 25 Jun 2024 01:34:56 GMT</pubDate>
    </item>
    <item>
      <title>CVE-2023-1097 · 9.3 CRITICAL — Unauthenticated Command Injection EG7035-M11 Series</title>
      <link>https://vulnogram.org/CVE-2023-1097</link>
      <guid isPermaLink="true">https://vulnogram.org/CVE-2023-1097</guid>
      <description>Baicells EG7035-M11 devices with firmware through BCE-ODU-1.0.8 are vulnerable to improper code exploitation via HTTP GET command injections. Commands are executed using pre-login execution and executed with root permissions. The following methods ha…</description>
      <category>Critical</category>
      <pubDate>Wed, 01 Mar 2023 19:29:26 GMT</pubDate>
    </item>
    <item>
      <title>CVE-2023-0776 · 8.1 HIGH 🌩️ — Remote Code Execution in Baicells QRTB Platform</title>
      <link>https://vulnogram.org/CVE-2023-0776</link>
      <guid isPermaLink="true">https://vulnogram.org/CVE-2023-0776</guid>
      <description>Baicells Nova 436Q, Nova 430E, Nova 430I, and Neutrino 430 LTE TDD eNodeB devices with firmware through QRTB 2.12.7 are vulnerable to remote shell code exploitation via HTTP command injections. Commands are executed using pre-login execution and exec…</description>
      <category>High</category>
      <category>Network Exploitable</category>
      <pubDate>Fri, 10 Feb 2023 21:50:42 GMT</pubDate>
    </item>
    <item>
      <title>CVE-2023-24508 · 8.1 HIGH 🌩️ — Remote Code Execution in Baicells RTS Platform</title>
      <link>https://vulnogram.org/CVE-2023-24508</link>
      <guid isPermaLink="true">https://vulnogram.org/CVE-2023-24508</guid>
      <description>Baicells Nova 227, Nova 233, and Nova 243 LTE TDD eNodeB and Nova 246 devices with firmware through RTS/RTD 3.6.6 are vulnerable to remote shell code exploitation via HTTP command injections. Commands are executed using pre-login execution and execut…</description>
      <category>High</category>
      <category>Network Exploitable</category>
      <pubDate>Tue, 24 Jan 2023 22:32:58 GMT</pubDate>
    </item>
    <item>
      <title>CVE-2023-24022 · 10 CRITICAL 🌩️ — Hard Coded Credential Crypt Vulnerability</title>
      <link>https://vulnogram.org/CVE-2023-24022</link>
      <guid isPermaLink="true">https://vulnogram.org/CVE-2023-24022</guid>
      <description>Baicells Nova 227, Nova 233, and Nova 243 LTE TDD eNodeB devices with firmware through RTS/RTD 3.7.11.3 have hardcoded credentials that are easily discovered and can be used by remote attackers to authenticate via ssh. (The credentials are stored in…</description>
      <category>Critical</category>
      <category>Network Exploitable</category>
      <pubDate>Tue, 24 Jan 2023 15:51:17 GMT</pubDate>
    </item>
  </channel>
</rss>
