Read the docs

Baicells

Records16All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical10CVSS 9.0–10.0
CVSS high3CVSS 7.0–8.9

Exploited now

Baicells records in CISA KEV

No Baicells vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records
Neutrino 430 Firmware 2 records MEDIUM Nova436q Firmware 2 records MEDIUM Rtd Firmware 2 records MEDIUM Rts Firmware 2 records MEDIUM Eg7035-m11 Firmware 1 record MEDIUM Nova430e Firmware 1 record MEDIUM Nova430l Firmware 1 record MEDIUM

Records

16 records

TI-2023-09807 CVE-2023-24022 · GHSA-hqr2-p4fq-45vv

Hard Coded Credential Crypt Vulnerability

Priority MEDIUM 52

Baicells Nova 227, Nova 233, and Nova 243 LTE TDD eNodeB devices with firmware through RTS/RTD 3.7.11.3 have hardcoded credentials that are easily discovered and can be used by remote attackers to authenticate via ssh.

CVSS 3.1CRITICAL 10.0 Network No auth No interaction EPSS 0.016 Published 2023-01-24 No fix listed CWE-284
TI-2025-34739 CVE-2025-55048 · GHSA-46xh-g8f2-wg69

Multiple CWE-78

Priority MEDIUM 50

Multiple CWE-78

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00562 Published 2025-09-09 No fix listed CWE-78
TI-2025-34742 CVE-2025-55051 · GHSA-m5h2-r64r-63jh

CWE-1392: Use of Default Credentials

Priority MEDIUM 49

CWE-1392: Use of Default Credentials

CVSS 3.1CRITICAL 10.0 Network No auth No interaction EPSS 0.00342 Published 2025-09-09 No fix listed CWE-1392
TI-2025-34740 CVE-2025-55049 · GHSA-83mr-xxcj-w7x3

Use of Default Cryptographic Key (CWE-1394)

Priority MEDIUM 47

Use of Default Cryptographic Key (CWE-1394)

CVSS 3.1CRITICAL 9.1 Network No auth No interaction EPSS 0.00296 Published 2025-09-09 No fix listed CWE-1394
TI-2023-05692 CVE-2023-6198 · GHSA-w3q4-wghg-w5gc

Hard Coded Credential

Priority MEDIUM 46

Use of Hard-coded Credentials vulnerability in Baicells Snap Router BaiCE_BMI on EP3011 (User Passwords modules) allows unauthorized access to the device.

CVSS 3.1CRITICAL 9.3 Network No auth No interaction EPSS 0.00358 Published 2024-06-25 No fix listed CWE-798
TI-2023-10129 CVE-2023-24508 · GHSA-ggfg-pcqp-37x5

Remote Code Execution in Baicells RTS Platform

Priority MEDIUM 45

Baicells Nova 227, Nova 233, and Nova 243 LTE TDD eNodeB and Nova 246 devices with firmware through RTS/RTD 3.6.6 are vulnerable to remote shell code exploitation via HTTP command injections.

CVSS 3.1CRITICAL 9.6 Network No auth User interaction EPSS 0.01711 Published 2023-01-24 No fix listed CWE-79
TI-2023-01039 CVE-2023-1097 · GHSA-rfcc-r6v3-cggj

Unauthenticated Command Injection EG7035-M11 Series

Priority MEDIUM 45

Baicells EG7035-M11 devices with firmware through BCE-ODU-1.0.8 are vulnerable to improper code exploitation via HTTP GET command injections.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.0113 Published 2023-03-01 No fix listed CWE-94
TI-2023-00736 CVE-2023-0776 · GHSA-5r9j-84ww-47gm

Remote Code Execution in Baicells QRTB Platform

Priority MEDIUM 45

Baicells Nova 436Q, Nova 430E, Nova 430I, and Neutrino 430 LTE TDD eNodeB devices with firmware through QRTB 2.12.7 are vulnerable to remote shell code exploitation via HTTP command injections.

CVSS 3.1CRITICAL 10.0 Network No auth No interaction EPSS 0.01193 Published 2023-02-10 No fix listed CWE-79
TI-2025-34738 CVE-2025-55047 · GHSA-57x8-qx29-4f38

CWE-798 Use of Hard-coded Credentials

Priority LOW 37

CWE-798 Use of Hard-coded Credentials

CVSS 3.1HIGH 8.4 Local No auth No interaction EPSS 0.00144 Published 2025-09-09 No fix listed CWE-798
TI-2026-63744 CVE-2026-96274 · GHSA-r2c9-ccv7-wg9h

Uncaught exception in Baicells Nova 430H

Priority LOW 35

In Baicells Nova 430H, an unauthenticated device within radio range can send a malformed uplink message during connection setup that contains an invalid NAS payload.

CVSS 4.0HIGH 8.3 Adjacent network No auth No interaction EPSS 0.00159 Published 2026-09-29 No fix listed CWE-248
TI-2025-34744 CVE-2025-55053 · GHSA-9qwv-q8rp-329v

CWE-328: Use of Weak Hash

Priority LOW 28

CWE-328: Use of Weak Hash

CVSS 3.1MEDIUM 6.5 Network Low privileges No interaction EPSS 0.00246 Published 2025-09-09 No fix listed CWE-328
Open these records in search →