Remote Code Execution in Baicells QRTB Platform

CVE-2023-0776

What is CVE-2023-0776?

Baicells Nova 436Q, Nova 430E, Nova 430I, and Neutrino 430 LTE TDD eNodeB devices are exposed to severe security risks due to a flaw that allows for remote shell code execution through HTTP command injections. This vulnerability permits an attacker to execute commands on the affected devices with root-level permissions prior to user authentication. Affected firmware versions up to QRTB 2.12.7 have been validated as exploitable, potentially enabling unauthorized access and manipulation of device functionality. For enhanced security, it is crucial for device administrators to apply lifecycle management practices and promptly update firmware.

Human OS v1.0:
Ageing Is an Unpatched Zero-Day Vulnerability.

Remediate biological technical debt. Prime Ageing uses 95% high-purity SIRT6 activation to maintain genomic integrity and bolster systemic resilience.

Deploy the Patch →

References