Baicells

13 CVEs across 31 Baicells products. Browse Baicells vulnerabilities, severities, and proof-of-concept exploits.

Baicells products with known CVEs

ProductCVEs
Nova430e/430i, Nova436q, Neutrino430, Nova8463
Neutrino 4302
Neutrino 430 Firmware2
Neutrino430, Nova436q, Nova430e/430i, Nova846, Nova246, Nova243, Nova233, Nova2272
Nova 2272
Nova2272
Nova 2332
Nova2332
Nova2432
Nova436q2
Nova436q Firmware2
Rtd Firmware2
Rts Firmware2
Eg3661m1
Eg7035e-M111
Eg7035-M111
Eg7035-M11 Firmware1
Neutrino 4301
Neutrino4301
Nova 2431
Nova 2461
Nova2461
Nova 430e1
Nova430e1
Nova430e Firmware1
Nova 430i1
Nova430l1
Nova430l Firmware1
Nova 436q1
Snap Router1
Spectra Lte-U Enb1
Baicells CVEs — newest first
CVESeverityScorePublishedSummary
CVE-2026-19771High7.22026-08-14A vulnerability was identified in Baicells EG3661M BaiCE_BQ6_2.0.5.3_NA. This impacts an unknown function of the file /cgi-bin/luci of the component LuCI Web I…
CVE-2025-55054Medium6.12025-09-09CWE-79 Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting')
CVE-2025-55053Medium6.52025-09-09CWE-328: Use of Weak Hash
CVE-2025-55052Medium4.32025-09-09CWE-200 Exposure of Sensitive Information to an Unauthorized Actor
CVE-2025-55051Critical10.02025-09-09CWE-1392: Use of Default Credentials
CVE-2025-55050Critical9.82025-09-09CWE-1242: Inclusion of Undocumented Features
CVE-2025-55049Critical9.12025-09-09Use of Default Cryptographic Key (CWE-1394)
CVE-2025-55048Critical9.82025-09-09Multiple CWE-78
CVE-2025-55047High8.42025-09-09CWE-798 Use of Hard-coded Credentials
CVE-2023-6198Critical9.32024-06-25Use of Hard-coded Credentials vulnerability in Baicells Snap Router BaiCE_BMI on EP3011 (User Passwords modules) allows unauthorized access to the device.
CVE-2023-1097Critical9.32023-03-01Baicells EG7035-M11 devices with firmware through BCE-ODU-1.0.8 are vulnerable to improper code exploitation via HTTP GET command injections. Commands are exe…
CVE-2023-0776High8.12023-02-11Baicells Nova 436Q, Nova 430E, Nova 430I, and Neutrino 430 LTE TDD eNodeB devices with firmware through QRTB 2.12.7 are vulnerable to remote shell code exploit…
CVE-2023-24508High8.12023-01-26Baicells Nova 227, Nova 233, and Nova 243 LTE TDD eNodeB and Nova 246 devices with firmware through RTS/RTD 3.6.6 are vulnerable to remote shell code exploitat…
CVE-2023-24022Critical10.02023-01-26Baicells Nova 227, Nova 233, and Nova 243 LTE TDD eNodeB devices with firmware through RTS/RTD 3.7.11.3 have hardcoded credentials that are easily discovered a…
CVE-2022-24693Critical9.82022-03-30Baicells Nova436Q and Neutrino 430 devices with firmware through QRTB 2.7.8 have hardcoded credentials that are easily discovered, and can be used by remote at…