CVE:CVE-2023-0776
CNNVD:CNNVD-202302-750
Baicells Nova436Q是美国Baicells公司的一款先进的双载波户外 eNodeB (eNB)。
Baicells Nova 436Q、Nova 430E、Nova 430I、Neutrino 430 LTE TDD eNodeB devices QRTB 2.12.7版本及之前版本存在安全漏洞。攻击者利用该漏洞通过HTTP命令注入远程执行shell代码。
solution:Upgrade baicells neutrino_430_firmware to a higher version than qrtb_2.12.7,and avoid the version (,qrtb_2.12.7]; Upgrade baicells nova430l_firmware to a higher version than qrtb_2.12.7,and avoid the version (,qrtb_2.12.7]; Upgrade baicells nova430e_firmware to a higher version than qrtb_2.12.7,and avoid the version (,qrtb_2.12.7]; Upgrade baicells nova436q_firmware to a higher version than qrtb_2.12.7,and avoid the version (,qrtb_2.12.7]