CVE-2023-24022
CVE.org · Published
- Record status
- Published
- Identifier year (not publication year)
- 2023
- Source publication
- Source updated
- Imported by cveboard
- Source snapshot
- cve_2026-10-24_midnight_baseline ·
CNA source text (English)
Hard Coded Credential Crypt Vulnerability
Baicells Nova 227, Nova 233, and Nova 243 LTE TDD eNodeB devices with firmware through RTS/RTD 3.7.11.3 have hardcoded credentials that are easily discovered and can be used by remote attackers to authenticate via ssh. (The credentials are stored in the firmware, encrypted by the crypt function.)
Scoped product and version facts
Fix information unknown; no fixed version is derived here. Missing information does not prove that no fix exists.
Exploitation unknown; this catalogue does not assess exploitation.
Nova 227
- Vendor
- Baicells
- Product
- Nova 227
- Platforms
- RTS
- Default status
unaffected- Package
- 3.7.11.3
| Version (version) | Status (status) | Version scheme (versionType) | Exclusive end (lessThan) | Inclusive end (lessThanOrEqual) | Status changes (at → status) |
|---|---|---|---|---|---|
| 0 | affected | patch | Unavailable | 3.7.11.3 |
|
Nova 233
- Vendor
- Baicells
- Product
- Nova 233
- Platforms
- RTS
- Default status
unaffected- Package
- 3.7.11.3
| Version (version) | Status (status) | Version scheme (versionType) | Exclusive end (lessThan) | Inclusive end (lessThanOrEqual) | Status changes (at → status) |
|---|---|---|---|---|---|
| 0 | affected | patch | Unavailable | 3.7.11.3 |
|
Nova 243
- Vendor
- Baicells
- Product
- Nova 243
- Platforms
- RTS
- Default status
unaffected- Package
- 3.7.11.3
| Version (version) | Status (status) | Version scheme (versionType) | Exclusive end (lessThan) | Inclusive end (lessThanOrEqual) | Status changes (at → status) |
|---|---|---|---|---|---|
| 0 | affected | patch | Unavailable | 3.7.11.3 |
|