PT-2023-16751 · Baicells · Baicells Eg7035-M11

Lionel Musonza · Published 2023-03-01 · Updated 2023-03-09 · CVE-2023-1097

Positive Technologies (AI Summary)

CVSS v3.1

9.8

Critical

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Baicells EG7035-M11 devices with firmware through BCE-ODU-1.0.8

Description The issue concerns improper code exploitation via HTTP GET command injections. Commands are executed using pre-login execution and are executed with root permissions. A 3rd party analyst has tested and validated the methods, confirming them as exploitable. This was discovered by Lionel Musonza.

Recommendations For Baicells EG7035-M11 devices with firmware through BCE-ODU-1.0.8, consider disabling HTTP GET commands until a patch is available to prevent exploitation. Restrict access to the device to minimize the risk of exploitation. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Command Injection

Code Injection

Weakness Enumeration

CWE-77

CWE-94

Related Identifiers

CVE-2023-1097

Affected Products

Baicells Eg7035-M11

References · 7

• https://nvd.nist.gov/vuln/detail/CVE-2023-1097 · Security Note
• https://community.na.baicells.com/t/baice-bm-2-5-26-new-cpe-software-has-been-released/1756 · Patch
• https://osv.dev/vulnerability/CVE-2023-1097 · Vendor Advisory
• https://img.baicells.com//Upload/20220524/FILE/BaiCE_BM_2.5.26_NA.bin.bin · Patch
• https://t.me/cibsecurity/59277 · Telegram Post
• https://t.me/cvenotify/45848 · Telegram Post
• https://t.me/cvenotify/45290 · Telegram Post