Baicells EG7035-M11 devices with firmware through BCE-ODU-1.0.8 are vulnerable to improper code exploitation via HTTP GET command injections. Commands are executed using pre-login execution and executed with root permissions. The following methods have been tested and validated by a 3rd party analyst and have been confirmed exploitable special thanks to Lionel Musonza for the discovery.
References
Configurations
Configuration 1 (hide)
| AND |
|
History
21 Nov 2024, 07:38
| Type | Values Removed | Values Added |
|---|---|---|
| CVSS |
v2 : v3 : |
v2 : unknown
v3 : 9.3 |
| References | () https://community.na.baicells.com/t/baice-bm-2-5-26-new-cpe-software-has-been-released/1756 - Release Notes | |
| References | () https://img.baicells.com//Upload/20220524/FILE/BaiCE_BM_2.5.26_NA.bin.bin - Product |
07 Nov 2023, 04:02
| Type | Values Removed | Values Added |
|---|---|---|
| Summary | Baicells EG7035-M11 devices with firmware through BCE-ODU-1.0.8 are vulnerable to improper code exploitation via HTTP GET command injections. Commands are executed using pre-login execution and executed with root permissions. The following methods have been tested and validated by a 3rd party analyst and have been confirmed exploitable special thanks to Lionel Musonza for the discovery. |
Information
Published : 2023-03-01 20:15
Updated : 2024-11-21 07:38
NVD link : CVE-2023-1097
Mitre link : CVE-2023-1097
CVE.ORG link : CVE-2023-1097
JSON object : View
Products Affected
baicells
- eg7035-m11_firmware
- eg7035-m11