CVE-2023-24508: Baicells Nova 227, XSS

Описание

Оригинално описание

Baicells Nova 227, Nova 233, and Nova 243 LTE TDD eNodeB and Nova 246 devices with firmware through RTS/RTD 3.6.6 are vulnerable to remote shell code exploitation via HTTP command injections. Commands are executed using pre-login execution and executed with root permissions. The following methods below have been tested and validated by a 3rd party analyst and has been confirmed exploitable special thanks to Rustam Amin for providing the steps to reproduce. 

Засегнати продукти

• Baicells Nova 227: до 3.6.6
• Baicells Nova 233: до 3.6.6
• Baicells Nova 246: до 3.6.6

Вид слабост

• CWE-79 XSS

История

Други уязвимости в Baicells Nova 227

• 10.0CVE-2023-24022

Първоизточници

• https://www.cve.org/CVERecord?id=CVE-2023-24508
• https://nvd.nist.gov/vuln/detail/CVE-2023-24508
• https://img.baicells.com//Upload/20230118/FILE/BaiBS_RTS_3.7.11.6.IMG.IMG
• https://img.baicells.com//Upload/20230118/FILE/BaiBS_RTS_3.7.11.6_Changelog.PDF.pdf